The Classified Listing Pro WordPress plugin prior to 2.0.20 does not escape a generated URL before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
radiustheme classified listing pro - classified ads \\& business directory |