7.2
High
CVE-2026-28138 Deserialization of Untrusted Data vulnerability in Stylemix uListing ulisting allows Object Injection.This issue affects…
Description
Deserialization of Untrusted Data vulnerability in Stylemix uListing ulisting allows Object Injection.This issue affects uListing: from n/a through <= 2.2.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| uListing 2.2 | earliest → 2.2.0 | No fix stated |
Other CVEs of uListing
The 11 CVEs of uListing →
CVE-2026-62033
Subscriber Settings Change in uListing <= 2.2.0 versions
7.6
High
CVE-2026-62031
Unauthenticated SQL Injection in uListing <= 2.2.0 versions
9.3
Critical
CVE-2026-27391
Subscriber Broken Access Control in uListing <= 2.2.0 versions
5.4
Medium
CVE-2026-27392
Contributor Broken Access Control in uListing <= 2.2.0 versions
4.3
Medium