7.5
High
CVE-2025-52715 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
Description
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Classified Listing classified-listing allows PHP Local File Inclusion.This issue affects Classified Listing: from n/a through <= 4.2.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Classified Listing 4.2 | earliest → 4.2.0 | No fix stated |
Other CVEs of Classified Listing
The 10 CVEs of Classified Listing →
CVE-2026-96351
Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 6.1.3 versions
7.1
High
CVE-2026-57355
Subscriber Broken Access Control in Classified Listing <= 5.4.2 versions
6.5
Medium
CVE-2026-57344
Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.4.2 versions
7.1
High
CVE-2026-23546
Insertion of Sensitive Information Into Sent Data vulnerability in RadiusTheme Classified Listing classified-listing…
6.5
Medium