Improper Neutralization of Formula Elements in a CSV File vulnerability in wpWax Directorist – WordPress Business Directory Plugin with Classified Ads Listing.This issue affects Directorist – WordPress Business Directory Plugin with Classified Ads Listings: from n/a through 7.7.1.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required High

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00211.

Exploitation none

Automatable no

Technical Impact total

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
wpWax Directorist – WordPress Business Directory Plugin with Classified Ads Listings unaffected
Version Status Constraints
n/a affected ≤ 7.7.1

Configuration 1 [-]

cpe:2.3:a:wpwax:directorist:*:*:*:*:*:wordpress:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Wpwax Subscribe
Directorist Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2023-46290 Improper Neutralization of Formula Elements in a CSV File vulnerability in wpWax Directorist – WordPress Business Directory Plugin with Classified Ads Listing.This issue affects Directorist – WordPress Business Directory Plugin with Classified Ads Listings: from n/a through 7.7.1.
Fixes

Solution

Update to 7.7.2 or a higher version.

Workaround

No workaround given by the vendor.

References
Link Providers
https://patchstack.com/database/vulnerability/directorist/wordpress-directorist-plugin-7-7-0-csv-injection?_s_id=cve cve-icon cve-icon
History

Tue, 28 Apr 2026 19:30:00 +0000

Type Values Removed Values Added
References

Tue, 28 Apr 2026 18:30:00 +0000

Type Values Removed Values Added
Description A vulnerability in wpWax Directorist directorist.This issue affects Directorist: from n/a through <= 7.7.1. Improper Neutralization of Formula Elements in a CSV File vulnerability in wpWax Directorist – WordPress Business Directory Plugin with Classified Ads Listing.This issue affects Directorist – WordPress Business Directory Plugin with Classified Ads Listings: from n/a through 7.7.1.
Title WordPress Directorist plugin <= 7.7.1 - CSV Injection WordPress Directorist Plugin <= 7.7.1 is vulnerable to CSV Injection

Tue, 28 Apr 2026 13:15:00 +0000

Type Values Removed Values Added
Description Improper Neutralization of Formula Elements in a CSV File vulnerability in wpWax Directorist – WordPress Business Directory Plugin with Classified Ads Listing.This issue affects Directorist – WordPress Business Directory Plugin with Classified Ads Listings: from n/a through 7.7.1. A vulnerability in wpWax Directorist directorist.This issue affects Directorist: from n/a through <= 7.7.1.
Title WordPress Directorist Plugin <= 7.7.1 is vulnerable to CSV Injection WordPress Directorist plugin <= 7.7.1 - CSV Injection
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

 cvssV3_1

{'score': 5.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L'}

Wed, 19 Feb 2025 22:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

 ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Patchstack

Published:

Updated: 2026-04-28T16:08:38.776Z

Reserved: 2023-09-01T11:55:20.628Z

Link: CVE-2023-41798

cve-icon Vulnrichment

Updated: 2024-08-02T19:09:48.218Z

cve-icon NVD

Status : Modified

Published: 2023-11-07T18:15:08.773

Modified: 2026-04-28T19:21:19.193

Link: CVE-2023-41798

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses