CVE-2022-2655

The Classified Listing Pro WordPress plugin before 2.0.20 does not escape a generated URL before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting

Score

CVSS 3.1 6.1 Medium

Status

Modified - contact@wpscan.com

Published

2022-09-16

Last modified

2024-08-03

Weaknesses

CWE-79

Affected products

• Classified Listing (Radiustheme)
• Classified Listing Pro - Classified Ads Business Directory Plugin (Unknown)

References

• https://wpscan.com/vulnerability/acc9675a-56f6-411a-9594-07144c2aad1b