WordPress Classified Listing Plugin Code Injection Vulnerability

A cross-site scripting (XSS) vulnerability allowing code injection has been identified in the WordPress Classified Listing plugin, affecting versions through 5.0.0. This vulnerability arises from improper handling of script-related HTML tags, which could enable a malicious actor to inject content into the website's pages or posts. Such an injection could be exploited to introduce phishing pages or other harmful content.

Impact

Exploitation of this vulnerability could lead to unauthorized content injection, allowing for the insertion of malicious or deceptive material into the affected website's pages or posts.

Remediation

Users of the WordPress Classified Listing plugin should update to version 5.0.1 or later to address this vulnerability. Patchstack users can enable auto-update for vulnerable plugins.