Vulnerabilities > Cridio > Listingpro

DATE CVE VULNERABILITY TITLE RISK
2019-12-26 CVE-2019-19541 Cross-site Scripting vulnerability in Cridio Listingpro
The ListingPro theme before v2.0.14.2 for WordPress has Persistent XSS via the Best Day/Night field on the new listing submit page.
network
low complexity
cridio CWE-79
5.4
5.4
2019-12-26 CVE-2019-19540 Cross-site Scripting vulnerability in Cridio Listingpro
The ListingPro theme before v2.0.14.2 for WordPress has Reflected XSS via the What field on the homepage.
network
low complexity
cridio CWE-79
6.1
6.1