Approved changes feed: RSS · Atom

cpe:2.3:a:linksoftwarellc:business_manager:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorLinksoftwarellc (4798ee00-433f-59ad-a69f-5f7a441a6d1d)
ProductBusiness Manager (44e999b2-8f15-5b80-abbf-cb3de1ffd470)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-39332 vulnerable 2026-06-08 05:33:50.076219 Business Manager – WordPress ERP, HR, CRM, and Project Management Plugin <= 1.4.5 Authenticated Stored Cross-Site Scripting
MEDIUM (5.5)
The Business Manager WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization found throughout the plugin which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 1.4.5. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled.
Published: 2021-10-15T12:15:15.115Z
Updated: 2025-02-14T18:10:57.252Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.