← Database

CVE-2022-2654

MEDIUM CVSS: 6.1 Published: 2022-09-16 Modified: 2026-06-17

Description

The Classima WordPress theme before 2.1.11 and some of its required plugins (Classified Listing before 2.2.14, Classified Listing Pro before 2.0.20, Classified Listing Store & Membership before 1.4.20 and Classima Core before 1.10) do not escape a parameter before outputting it back in attributes, leading to Reflected Cross-Site Scripting

Affected Platforms

Radiustheme Classima CoreRadiustheme ClassimaRadiustheme Classified ListingRadiustheme Classified Listing Store \& Membership

Weakness Type

CWE-79

References