Vulnerability Details CVE-2024-5882
The Ultimate Classified Listings WordPress plugin before 1.3 does not validate the `ucl_page` and `layout` parameters allowing unauthenticated users to access PHP files on the server from the listings page
Exploit prediction scoring system (EPSS) score
EPSS Score 0.019
EPSS Ranking 82.3%
CVSS Severity
CVSS v3 Score 7.5
References
Products affected by CVE-2024-5882
-
cpe:2.3:a:webcodingplace:ultimate_classified_listings:-
-
cpe:2.3:a:webcodingplace:ultimate_classified_listings:1.0.0
-
cpe:2.3:a:webcodingplace:ultimate_classified_listings:1.1
-
cpe:2.3:a:webcodingplace:ultimate_classified_listings:1.2