7.6
High
CVE-2025-32122 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix uListing ulisting allows Blind SQL Injection.This issue affects uListing: from n/a through <= 2.2.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| uListing 2.2 | earliest → 2.2.0 | No fix stated |
Other CVEs of uListing
The 11 CVEs of uListing →
CVE-2026-62033
Subscriber Settings Change in uListing <= 2.2.0 versions
7.6
High
CVE-2026-62031
Unauthenticated SQL Injection in uListing <= 2.2.0 versions
9.3
Critical
CVE-2026-27391
Subscriber Broken Access Control in uListing <= 2.2.0 versions
5.4
Medium
CVE-2026-27392
Contributor Broken Access Control in uListing <= 2.2.0 versions
4.3
Medium