Lucene search
+L

71 matches found

VulnCheck KEV
VulnCheck KEV
•added 2026/05/04 12:00 a.m.•13 views

VulnCheck KEV: CVE-2025-64377

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in CridioStudio ListingPro listingpro allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through 2.9.10...

8.1CVSS5.8AI score0.00404EPSS
SaveIn wildExploits0References2
RedhatCVE
RedhatCVE
•added 2026/03/06 7:54 a.m.•16 views

CVE-2026-28122

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CridioStudio ListingPro listingpro-plugin allows Reflected XSS.This issue affects ListingPro: from n/a through = 2.9.8...

7.1CVSS5.8AI score0.00261EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/05 5:54 a.m.•13 views

CVE-2026-28122

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CridioStudio ListingPro listingpro-plugin allows Reflected XSS.This issue affects ListingPro: from n/a through = 2.9.8...

5.9AI score0.00261EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/05 12:00 a.m.•1 views

CVE-2026-28122: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CridioStudio ListingPro listingpro-plugin allows Reflected XSS.This issue affects ListingPro: from n/a through = 2.9.8...

7.1CVSS5.8AI score0.00261EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/05 12:00 a.m.•24 views

PT-2026-23394

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CridioStudio ListingPro listingpro-plugin allows Reflected XSS.This issue affects ListingPro: from n/a through = 2.9.8...

5.9AI score0.00261EPSS
SaveExploits0References2
NVD
NVD
•added 2026/01/22 5:16 p.m.•19 views

CVE-2025-69051

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CridioStudio ListingPro Reviews listingpro-reviews allows Reflected XSS.This issue affects ListingPro Reviews: from n/a through 2.9.11...

7.1CVSS0.00264EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/22 12:00 a.m.•1 views

CVE-2025-69051: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CridioStudio ListingPro Reviews listingpro-reviews allows Reflected XSS.This issue affects ListingPro Reviews: from n/a through 2.9.11...

7.1CVSS5.8AI score0.00264EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 8:33 a.m.•17 views

CVE-2024-39621

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in CridioStudio ListingPro listingpro-plugin allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through = 2.9.4...

8CVSS5.9AI score0.00521EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 8:33 a.m.•22 views

CVE-2024-39622

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CridioStudio ListingPro listingpro allows SQL Injection.This issue affects ListingPro: from n/a through = 2.9.4...

9.8CVSS5.9AI score0.00458EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 8:32 a.m.•24 views

CVE-2024-39620

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CridioStudio ListingPro listingpro-plugin allows SQL Injection.This issue affects ListingPro: from n/a through = 2.9.4...

8.8CVSS5.9AI score0.00441EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 8:32 a.m.•18 views

CVE-2024-39619

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in CridioStudio ListingPro listingpro-plugin allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through = 2.9.4...

9.8CVSS5.9AI score0.00553EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/19 7:32 a.m.•19 views

CVE-2025-64376

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CridioStudio ListingPro listingpro allows Reflected XSS.This issue affects ListingPro: from n/a through 2.9.10...

7.1CVSS6.4AI score0.00178EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/19 7:32 a.m.•15 views

CVE-2025-64378

Missing Authorization vulnerability in CridioStudio ListingPro listingpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro: from n/a through 2.9.10...

7.1CVSS7AI score0.00203EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/18 9:30 a.m.•18 views

EUVD-2025-204094

Missing Authorization vulnerability in CridioStudio ListingPro listingpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro: from n/a through = 2.9.9...

6.5CVSS6.5AI score0.00252EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•1 views

CVE-2025-64378: Missing Authorization

Missing Authorization vulnerability in CridioStudio ListingPro listingpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro: from n/a through 2.9.10...

7.1CVSS5.9AI score0.00203EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•2 views

CVE-2025-64376: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CridioStudio ListingPro listingpro allows Reflected XSS.This issue affects ListingPro: from n/a through 2.9.10...

7.1CVSS5.8AI score0.00178EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•3 views

CVE-2025-63039: Missing Authorization

Missing Authorization vulnerability in CridioStudio ListingPro listingpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro: from n/a through = 2.9.9...

6.5CVSS5.9AI score0.00252EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/18 12:00 a.m.•18 views

PT-2025-52191

Missing Authorization vulnerability in CridioStudio ListingPro listingpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro: from n/a through 2.9.10...

7AI score0.00203EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/12/12 3:11 p.m.•11 views

CVE-2025-63047

Missing Authorization vulnerability in CridioStudio ListingPro listingpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro: from n/a through = 2.9.9...

5.3CVSS7AI score0.00254EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/10 3:13 p.m.•13 views

CVE-2025-63049

Missing Authorization vulnerability in CridioStudio ListingPro Lead Form listingpro-lead-form allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects ListingPro Lead Form: from n/a through = 1.0.7...

5.3CVSS5.8AI score0.00301EPSS
SaveExploits0References1
Rows per page
Query Builder