CVE-2022-2654
16.09.2022, 09:15
The Classima WordPress theme before 2.1.11 and some of its required plugins (Classified Listing before 2.2.14, Classified Listing Pro before 2.0.20, Classified Listing Store & Membership before 1.4.20 and Classima Core before 1.10) do not escape a parameter before outputting it back in attributes, leading to Reflected Cross-Site Scripting
| Vendor | Product | Version |
|---|---|---|
| radiustheme | classified_listing | 𝑥 < 2.0.20 |
| radiustheme | classified_listing | 𝑥 < 2.2.14 |
| radiustheme | classified_listing_store_\&_membership | 𝑥 < 1.4.20 |
| radiustheme | classima | 𝑥 < 2.1.11 |
| radiustheme | classima_core | 𝑥 < 1.10 |
𝑥
= Vulnerable software versions