CVE-2022-2654

CVE-2022-2654: Classima < 2.1.11 - Reflected Cross-Site Scripting

Vendor Unknown
Product Classified Listing – Classified ads & Business Directory Plugin
Weakness CWE-79 · XSS
Published September 16, 2022
Last update June 5, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Classima WordPress theme before 2.1.11 and some of its required plugins (Classified Listing before 2.2.14, Classified Listing Pro before 2.0.20, Classified Listing Store & Membership before 1.4.20 and Classima Core before 1.10) do not escape a parameter before outputting it back in attributes, leading to Reflected Cross-Site Scripting

Key dates

02Disclosure timeline

September 16, 2022 CVE published
June 5, 2025 Record updated