Ultimate Classified Listings vulnerabilities
We track 2 vulnerabilities in Ultimate Classified Listings products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 1, 2024.
2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score
Latest Ultimate Classified Listings vulnerabilities
- 7.1 High severity
Ultimate Classified Listings: Improper Neutralization of Input During Web Page Generation
The Ultimate Classified Listings WordPress plugin before 1.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
- 7.5 High severity
Ultimate Classified Listings: Improper Limitation of a Pathname to a Restricted Directory
The Ultimate Classified Listings WordPress plugin before 1.3 does not validate the `ucl_page` and `layout` parameters allowing unauthenticated users to access PHP files on the server from the listings page