Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2022-2654

Classima < 2.1.11 - Reflected Cross-Site Scripting

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Classima WordPress theme before 2.1.11 and some of its required plugins (Classified Listing before 2.2.14, Classified Listing Pro before 2.0.20, Classified Listing Store & Membership before 1.4.20 and Classima Core before 1.10) do not escape a parameter before outputting it back in attributes, leading to Reflected Cross-Site Scripting

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Classified Listing – Classified ads & Business Directory Plugin

  • 2.2.14 to < 2.2.14affected

Unknown Classified Listing Pro - Classified ads & Business Directory Plugin

  • 2.0.20 to < 2.0.20affected

Unknown Classified Listing Store & Membership Addon

  • 1.4.20 to < 1.4.20affected

Unknown Classima Core

  • 1.10 to < 1.10affected

Unknown Classima

  • 2.1.11 to < 2.1.11affected

References