← Back to CVEs
CVE-2019-19542
MEDIUM5.4
Description
The ListingPro theme before v2.0.14.2 for WordPress has Persistent XSS via the Good For field on the new listing submit page.
CVE Details
CVSS v3.1 Score5.4
SeverityMEDIUM
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Attack VectorNETWORK
ComplexityLOW
Privileges RequiredLOW
User InteractionREQUIRED
Published12/26/2019
Last Modified11/21/2024
Sourcenvd
Honeypot Sightings0
Affected Products
cridio:listingpro
Weaknesses (CWE)
CWE-79
References
https://wpvulndb.com/vulnerabilities/9974(cve@mitre.org)
https://wpvulndb.com/vulnerabilities/9974(af854a3a-2127-422b-91ae-364da2661108)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.