CVE-2026-61959

Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.24 versions.

MediumCWE-79 All CVEs

Weakness

Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.24 versions.

References

https://patchstack.com/database/wordpress/plugin/business-directory-plugin/vulnerability/wordpress-business-directory-plugin-6-4-24-cross-site-scripting-xss-vulnerability?_s_id=cve

Find the bug before an attacker does.

Sign in with GitHub and run your first audit in under a minute. The free plan needs no credit card.

Start a free audit See pricing