Vulnerabilities > Cridio > Listingpro > 2.9.4

DATE CVE VULNERABILITY TITLE RISK
2025-01-02 CVE-2024-39623 Cross-Site Request Forgery (CSRF) vulnerability in Cridio Listingpro
Cross-Site Request Forgery (CSRF) vulnerability in CridioStudio ListingPro allows Authentication Bypass.This issue affects ListingPro: from n/a through 2.9.4.
network
low complexity
cridio CWE-352
8.8
2024-08-01 CVE-2024-39619 Unspecified vulnerability in Cridio Listingpro
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through 2.9.3.
network
low complexity
cridio
critical
9.8
2024-08-01 CVE-2024-39621 Unspecified vulnerability in Cridio Listingpro
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through 2.9.3.
network
low complexity
cridio
7.2
2024-08-01 CVE-2024-39624 Unspecified vulnerability in Cridio Listingpro
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through 2.9.3.
network
low complexity
cridio
8.8