CVE-2023-5527 Business Directory Plugin <= 6.4.3 - Authenticated (Author+) CSV Injection
Authenticated attackers can inject malicious formulas into CSV exports, leading to code execution when administrators open the files.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-5527?
CVE-2023-5527 is a high-severity code injection vulnerability in strategy11team Business Directory Plugin – Easy Listing Directories for WordPress, published on 18 Jun 2024. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
The Business Directory Plugin plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 6.4.3 via the class-csv-exporter.php file. This allows authenticated attackers, with author-level permissions and above, to embed untrusted input into CSV files exported by administrators, which can result in code execution when these files are downloaded and opened on a local system with a vulnerable configuration.
Weakness: CWE-1236
Which versions are affected by CVE-2023-5527?
It affects 1 product.
Products include Businessdirectoryplugin Business Directory.
How do I fix CVE-2023-5527?
No fix has been published for CVE-2023-5527 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2023-5527 being exploited?
There is no known exploitation of CVE-2023-5527 in the wild and no public exploit code.
Other vulnerabilities in strategy11team Business Directory Plugin – Easy Listing Directories for WordPress
Sources
Also known as GHSA-c89w-5mx2-xmrq.