Stylemix Ulisting vulnerabilities
11 vulnerabilities
Known vulnerabilities in Stylemix Ulisting, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-25150stylemixulisting+1
EPSS score0.41%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix uListing ulisting allows Blind SQL Injection.This issue affects uListing: from n/a through <= 2.1.6.CVE-2025-25151stylemixulisting+1EPSS score0.45%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix uListing ulisting allows SQL Injection.This issue affects uListing: from n/a through <= 2.1.6.CVE-2025-32122stylemixulisting+1EPSS score0.58%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix uListing ulisting allows Blind SQL Injection.This issue affects uListing: from n/a through <= 2.2.0.CVE-2025-32662stylemixulisting+1EPSS score0.49%
Deserialization of Untrusted Data vulnerability in Stylemix uListing ulisting allows Object Injection.This issue affects uListing: from n/a through <= 2.2.0.CVE-2024-47344stylemixulisting+1EPSS score0.36%
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Stylemix uListing ulisting.This issue affects uListing: from n/a through <= 2.1.5.CVE-2026-62033stylemixulisting+1EPSS score0.30%
Subscriber Settings Change in uListing <= 2.2.0 versions.CVE-2026-62031stylemixulisting+1EPSS score0.29%
Unauthenticated SQL Injection in uListing <= 2.2.0 versions.CVE-2026-27392stylemixulisting+1EPSS score0.25%
Contributor Broken Access Control in uListing <= 2.2.0 versions.CVE-2026-27391stylemixulisting+1EPSS score0.29%
Subscriber Broken Access Control in uListing <= 2.2.0 versions.CVE-2026-28078stylemixulisting+1EPSS score0.49%
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Stylemix uListing ulisting allows Path Traversal.This issue affects uListing: from n/a through <= 2.2.0.CVE-2026-28138stylemixulisting+1EPSS score0.61%
Deserialization of Untrusted Data vulnerability in Stylemix uListing ulisting allows Object Injection.This issue affects uListing: from n/a through <= 2.2.0.