9.3
Critical
CVE-2026-62031 Unauthenticated SQL Injection in uListing <= 2.2.0 versions
Description
Unauthenticated SQL Injection in uListing <= 2.2.0 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| uListing 2.2 | earliest → 2.2.0 | No fix stated |
Other CVEs of uListing
The 11 CVEs of uListing →
CVE-2026-62033
Subscriber Settings Change in uListing <= 2.2.0 versions
7.6
High
CVE-2026-27391
Subscriber Broken Access Control in uListing <= 2.2.0 versions
5.4
Medium
CVE-2026-27392
Contributor Broken Access Control in uListing <= 2.2.0 versions
4.3
Medium
CVE-2026-28078
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Stylemix uListing…
4.9
Medium