4.9
Medium
CVE-2026-28078 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Stylemix uListing…
Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Stylemix uListing ulisting allows Path Traversal.This issue affects uListing: from n/a through <= 2.2.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| uListing 2.2 | earliest → 2.2.0 | No fix stated |
Other CVEs of uListing
The 11 CVEs of uListing →
CVE-2026-62033
Subscriber Settings Change in uListing <= 2.2.0 versions
7.6
High
CVE-2026-62031
Unauthenticated SQL Injection in uListing <= 2.2.0 versions
9.3
Critical
CVE-2026-27391
Subscriber Broken Access Control in uListing <= 2.2.0 versions
5.4
Medium
CVE-2026-27392
Contributor Broken Access Control in uListing <= 2.2.0 versions
4.3
Medium