CVE-2022-2654

2022-09-1609:15:10

CWE-79

[email protected]

web.nvd.nist.gov

classima

wordpress

theme

plugins

reflected cross-site scripting

cve-2022-2654

nvd

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

40.3%

JSON

The Classima WordPress theme before 2.1.11 and some of its required plugins (Classified Listing before 2.2.14, Classified Listing Pro before 2.0.20, Classified Listing Store & Membership before 1.4.20 and Classima Core before 1.10) do not escape a parameter before outputting it back in attributes, leading to Reflected Cross-Site Scripting

Affected configurations

Vulners

NVD

Node

radiusthemeclassified_listing_-_classified_ads_\&_business_directoryRange<2.2.14

radiusthemeclassified_listing_-_classified_ads_\&_business_directoryRange<2.0.20

radiusthemeclassified_listing_store_\&_membershipRange<1.4.20

radiusthemeclassima_coreRange<1.10

radiusthemeclassimaRange<2.1.11

VendorProductVersionCPE
radiusthemeclassified_listing_\-_classified_ads_\&_business_directory*cpe:2.3:a:radiustheme:classified_listing_\-_classified_ads_\&_business_directory:*:*:*:*:*:*:*:*
radiusthemeclassified_listing_\-_classified_ads_\&_business_directory*cpe:2.3:a:radiustheme:classified_listing_\-_classified_ads_\&_business_directory:*:*:*:*:*:*:*:*
radiusthemeclassified_listing_store_\&_membership*cpe:2.3:a:radiustheme:classified_listing_store_\&_membership:*:*:*:*:*:*:*:*
radiusthemeclassima_core*cpe:2.3:a:radiustheme:classima_core:*:*:*:*:*:*:*:*
radiusthemeclassima*cpe:2.3:a:radiustheme:classima:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
radiustheme	classified_listing_\-_classified_ads_\&_business_directory	*	cpe:2.3:a:radiustheme:classified_listing_\-_classified_ads_\&_business_directory::::::::
radiustheme	classified_listing_\-_classified_ads_\&_business_directory	*	cpe:2.3:a:radiustheme:classified_listing_\-_classified_ads_\&_business_directory::::::::
radiustheme	classified_listing_store_\&_membership	*	cpe:2.3:a:radiustheme:classified_listing_store_\&_membership::::::::
radiustheme	classima_core	*	cpe:2.3:a:radiustheme:classima_core::::::::
radiustheme	classima	*	cpe:2.3:a:radiustheme:classima::::::::

CNA Affected

[
  {
    "product": "Classified Listing – Classified ads & Business Directory Plugin",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "2.2.14",
        "status": "affected",
        "version": "2.2.14",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Classified Listing Pro - Classified ads & Business Directory Plugin",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "2.0.20",
        "status": "affected",
        "version": "2.0.20",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Classified Listing Store & Membership Addon",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "1.4.20",
        "status": "affected",
        "version": "1.4.20",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Classima Core",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "1.10",
        "status": "affected",
        "version": "1.10",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Classima",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "2.1.11",
        "status": "affected",
        "version": "2.1.11",
        "versionType": "custom"
      }
    ]
  }
]