Skip to content
Sign in
7.1 High

CVE-2024-6529 The Ultimate Classified Listings WordPress plugin before 1.4 does not sanitise and escape a parameter before…

Description

The Ultimate Classified Listings WordPress plugin before 1.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Affected products and versions

Product Affected versions Fixed in
Ultimate Classified Listings 1.4 earliest → < 1.4 1.4
ultimate_classified_listings 1.4 earliest → < 1.4 1.4

Other CVEs of Ultimate Classified Listings

The 3 CVEs of Ultimate Classified Listings →
CVE-2024-5883 The Ultimate Classified Listings WordPress plugin before 1.3 does not sanitise and escape a parameter before… 4.7 Medium CVE-2024-5882 The Ultimate Classified Listings WordPress plugin before 1.3 does not validate the `ucl_page` and `layout` parameters… 7.5 High
Track this CVE