CVE-2022-2655CWE-79

CVE-2022-2655: vulnerability in Classified Listing Pro - Classified ads &…

Classified Listing Pro < 2.0.20 - Reflected Cross-Site Scripting

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.7%
The Classified Listing Pro WordPress plugin before 2.0.20 does not escape a generated URL before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting
Related CVEs — Classified Listing Pro - Classified ads &…

In the same product, most dangerous first.