CVE-2026-27391 Subscriber Broken Access Control in uListing <= 2.2.0 versions

Description

Subscriber Broken Access Control in uListing <= 2.2.0 versions.

Affected products and versions

Product	Affected versions	Fixed in
uListing 2.2	earliest → 2.2.0	No fix stated

Other CVEs of uListing

The 11 CVEs of uListing →

CVE-2026-62033 Subscriber Settings Change in uListing <= 2.2.0 versions 7.6 High CVE-2026-62031 Unauthenticated SQL Injection in uListing <= 2.2.0 versions 9.3 Critical CVE-2026-27392 Contributor Broken Access Control in uListing <= 2.2.0 versions 4.3 Medium CVE-2026-28078 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Stylemix uListing… 4.9 Medium