CVE-2024-52487: WordPress Ultimate Classified Listings plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webcodingplace Ultimate Classified Listings ultimate-classified-listings allows Stored XSS.This issue affects Ultimate Classified Listings: from n/a through <= 1.7.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-52487?
CVE-2024-52487 is a stored Cross-site Scripting (XSS) vulnerability, which is considered to be of medium severity due to its potential impact on user security.
How do I fix CVE-2024-52487?
To fix CVE-2024-52487, update the Ultimate Classified Listings plugin to a version higher than 1.4.
What versions are affected by CVE-2024-52487?
CVE-2024-52487 affects versions of Ultimate Classified Listings up to and including 1.4.
What can an attacker do with CVE-2024-52487?
An attacker exploiting CVE-2024-52487 can inject malicious scripts into web pages viewed by other users, potentially leading to data theft or unauthorized actions.
Is my site at risk if I'm using Ultimate Classified Listings version 1.4 or earlier?
Yes, if you are using Ultimate Classified Listings version 1.4 or earlier, your site is at risk of being exploited due to the vulnerability described in CVE-2024-52487.