CVE-2022-2655

🗓️ 16 Sep 2022 08:40:31Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 58 Views🌐 WEB

The Classified Listing Pro WordPress plugin before 2.0.20 is vulnerable to Reflected Cross-Site Scriptin

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2022-2655	16 Sep 202209:15	–	attackerkb
Circl	CVE-2022-2655	16 Sep 202212:45	–	circl
CNNVD	WordPress plugin Classified Listing Pro 跨站脚本漏洞	16 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-2655 Classified Listing Pro < 2.0.20 - Reflected Cross-Site Scripting	16 Sep 202208:40	–	cvelist
EUVD	EUVD-2022-34901	3 Oct 202520:07	–	euvd
NVD	CVE-2022-2655	16 Sep 202209:15	–	nvd
Prion	Cross site scripting	16 Sep 202209:15	–	prion
Positive Technologies	PT-2022-17929 · WordPress · Pre Classified Listings	16 Sep 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-2655	22 May 202522:34	–	redhatcve
wpexploit	Classified Listing Pro < 2.0.20 - Reflected Cross-Site Scripting	22 Aug 202200:00	–	wpexploit

NVD

Vulners

Node

radiustheme classified_listingRange<2.0.20wordpress

[
  {
    "product": "Classified Listing Pro - Classified ads & Business Directory Plugin",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "2.0.20",
        "status": "affected",
        "version": "2.0.20",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/acc9675a-56f6-411a-9594-07144c2aad1b

Parameter	Position	Path	Description	CWE
(empty parameter)	query param	all-ads/	Reflected XSS due to not escaping generated URL in admin page output	CWE-79
(empty parameter)	query param	all-properties/	Reflected XSS due to not escaping generated URL in admin page output	CWE-79

21 Nov 2024 07:01Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.16.1

EPSS0.00422

CWE-79