Read the docs

Cars-seller-auto-classifieds-script Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Cars-seller-auto-classifieds-script Project records in CISA KEV

No Cars-seller-auto-classifieds-script Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

Priority MEDIUM 58

The request_list_request AJAX call of the Car Seller - Auto Classifieds Script WordPress plugin through 2.1.0, available to both authenticated and unauthenticated users, does not sanitise, validate or escape the order_id…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.14697 Published 2021-05-14 No fix listed CWE-89
Open these records in search →