Approved changes feed: RSS · Atom

cpe:2.3:a:directoriespro:directories_pro:1.3.45:*:*:*:*:wordpress:*:*

part: a version: 1.3.45 update: *

VendorDirectoriespro (3d73b8f4-df64-5fca-936d-c0009720d714)
ProductDirectories Pro (1b2c0d05-2e1b-5a8f-add0-518e3ee71269)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-29303 vulnerable 2026-06-08 05:24:58.087571 Details available
A cross-site scripting (XSS) vulnerability in the SabaiApp Directories Pro plugin 1.3.45 for WordPress allows remote attackers to inject arbitrary web script or HTML via a POST to /wp-admin/admin.php?page=drts/directories&q=%2F with _drts_form_build_id parameter containing the XSS payload and _t_ parameter set to an invalid or non-existent CSRF token.
Published: 2020-12-14T19:43:24.000Z
Updated: 2024-08-04T16:48:01.803Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.