Security Advisory

CVE-2022-2655

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-09-16 08:40:31

Last updated 2024-08-03 00:46:03

Assigner WPScan

State PUBLISHED

Description

The Classified Listing Pro WordPress plugin before 2.0.20 does not escape a generated URL before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting

← Browse all CVEs View on cve.org ↗