CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:L
What the vulnerability does
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in RadiusTheme Classified Listing classified-listing allows Code Injection.This issue affects Classified Listing: from n/a through <= 5.0.0.
Explanation of Vulnerability in Simple Terms
Classified Listing versions up to 5.0.0 contain a cross-site scripting vulnerability that allows an authenticated attacker to inject malicious scripts. The vulnerability requires user interaction and affects the integrity and availability of the site. An update to a version newer than 5.0.0 is required to resolve this issue.
What an attacker can do
Inject malicious scripts that execute in other users' browsers when they interact with affected content.
Potential impact on your site
Site users may have their sessions compromised or see defaced content; site functionality may be disrupted.
Conditions required to exploit
Attacker must be logged in with low-level privileges and trick a user into clicking a malicious link or visiting a crafted page.
Key dates
External resources
Related vulnerabilities
