Approved changes feed: RSS · Atom

cpe:2.3:a:business_manager:business_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBusiness Manager (4fce952b-c927-5839-9a90-fd06116bbbb1)
ProductBusiness Manager (9b8e5e28-4081-510d-8690-4583c8ef5e72)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-39332 vulnerable 2026-06-08 05:33:50.075641 Business Manager – WordPress ERP, HR, CRM, and Project Management Plugin <= 1.4.5 Authenticated Stored Cross-Site Scripting
MEDIUM (5.5)
The Business Manager WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization found throughout the plugin which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 1.4.5. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled.
Published: 2021-10-15T12:15:15.115Z
Updated: 2025-02-14T18:10:57.252Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.