CVE-2023-41798 — Directorist: AI-Powered Business Directory, Listings & Classified Ads [directorist] < 7.7.2

CVE	Vulnerability	Type	Severity	Affected	Fixed in	Published	Status
CVE-2023-41798	Directorist: AI-Powered Business Directory, Listings & Classified Ads [directorist] < 7.7.2	Improper Neutralization of Formula Elements in a CSV File	Medium 5.1	< 7.7.2	7.7.2	2023-09-05	—

CVE-2023-41798

No patched version is available. Rafshanzani Suhada discovered and reported this CSV Injection vulnerability in WordPress Directorist Plugin. This could allow a malicious actor to craft malicious formulas to then exploit vulnerabilities in the spreadsheet software or to execute commands to gain access to the victim';s PC. This vulnerability has not been known to be fixed yet.

Source: Patchstack

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)