Security Advisory

CVE-2024-5882

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-07-29 06:00:06

Last updated 2024-08-01 21:25:02

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The Ultimate Classified Listings WordPress plugin before 1.3 does not validate the `ucl_page` and `layout` parameters allowing unauthenticated users to access PHP files on the server from the listings page

← Browse all CVEs View on cve.org ↗