Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Classified Listing Pro - Classified ads & Business Directory Plugin 2.0.20 Clear all filters
TI-2022-02455 CVE-2022-2655 · GHSA-jvwh-h8w3-w6p4

Classified Listing Pro < 2.0.20 - Reflected Cross-Site Scripting

Priority LOW 28

The Classified Listing Pro WordPress plugin before 2.0.20 does not escape a generated URL before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00701 Published 2022-09-16 Fixed in 2.0.20 CWE-79
TI-2022-02454 CVE-2022-2654 · GHSA-mcf6-w793-99gq

Classima < 2.1.11 - Reflected Cross-Site Scripting

Priority MEDIUM 60

The Classima WordPress theme before 2.1.11 and some of its required plugins (Classified Listing before 2.2.14, Classified Listing Pro before 2.0.20, Classified Listing Store & Membership before 1.4.20 and Classima Core b…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00618 Published 2022-09-16 Fixed in 2.2.14, 2.0.20 +3 CWE-79