CVE-2023-3755

The connected sources confirm a concrete vulnerability in Creativeitem Atlas Business Directory Listing version 2.13, affecting the function/file path /home/filter_listings. The root cause is manipulation of the price-range parameter, which leads to a cross-site scripting (XSS) vulnerability. The...

CVE-2023-3756

CVE-2023-3756 affects Creativeitem Atlas Business Directory Listing 2.13. The vulnerability arises from user-controlled input in the /home/search function, where manipulating the argument (notably the search_string) triggers cross-site scripting. Descriptions across multiple feeds consistently id...