CVE-2019-19540 - The ListingPro theme before v2.0.14.2 for WordPress has Reflected XSS via the What field on the homepage

MEDIUM

The ListingPro theme before v2.0.14.2 for WordPress has Reflected XSS via the What field on the homepage

Published Dec 26, 2019

6.1

MEDIUM

CVSS 3.1

EPSS 0.93%

The ListingPro theme before v2.0.14.2 for WordPress has Reflected XSS via the What field on the homepage.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-9158		Advisory
https://wpvulndb.com/vulnerabilities/9974		x_refsource_MISCExploitThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 26, 2019

Updated Aug 5, 2024

Reserved Dec 3, 2019

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Dec 26, 2019

Updated Aug 5, 2024

GitHub

No data