CVE-2020-24699 – Chamber Dashboard Business Directory < 3.3.1 - Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2020-24699

The Chamber Dashboard Business Directory plugin 3.2.8 for WordPress allows XSS. El plugin Chamber Dashboard Business Directory versión 3.2.8 para WordPress, presenta una vulnerabilidad de tipo XSS The Chamber Dashboard Business Directory plugin for WordPress is vulnerable to Cross-Site Scripting in versions before 3.3.1 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts that execute in a victim's browser. • https://l0l.xyz/sec/2020/08/31/1-wordpress-crm-xss.html https://wordpress.org/plugins/chamber-dashboard-business-directory/#developers • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •