Stylemix Ulisting vulnerabilities

11 vulnerabilities

Known vulnerabilities in Stylemix Ulisting, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.3CVE-2025-25150stylemixulisting+1
EPSS score
0.41%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix uListing ulisting allows Blind SQL Injection.This issue affects uListing: from n/a through <= 2.1.6.
8.5CVE-2025-25151stylemixulisting+1
EPSS score
0.45%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix uListing ulisting allows SQL Injection.This issue affects uListing: from n/a through <= 2.1.6.
7.6CVE-2025-32122stylemixulisting+1
EPSS score
0.58%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix uListing ulisting allows Blind SQL Injection.This issue affects uListing: from n/a through <= 2.2.0.
8.8CVE-2025-32662stylemixulisting+1
EPSS score
0.49%
Deserialization of Untrusted Data vulnerability in Stylemix uListing ulisting allows Object Injection.This issue affects uListing: from n/a through <= 2.2.0.
5.3CVE-2024-47344stylemixulisting+1
EPSS score
0.36%
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Stylemix uListing ulisting.This issue affects uListing: from n/a through <= 2.1.5.
7.6CVE-2026-62033stylemixulisting+1
EPSS score
0.30%
Subscriber Settings Change in uListing <= 2.2.0 versions.
9.3CVE-2026-62031stylemixulisting+1
EPSS score
0.29%
Unauthenticated SQL Injection in uListing <= 2.2.0 versions.
4.3CVE-2026-27392stylemixulisting+1
EPSS score
0.25%
Contributor Broken Access Control in uListing <= 2.2.0 versions.
5.4CVE-2026-27391stylemixulisting+1
EPSS score
0.29%
Subscriber Broken Access Control in uListing <= 2.2.0 versions.
4.9CVE-2026-28078stylemixulisting+1
EPSS score
0.49%
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Stylemix uListing ulisting allows Path Traversal.This issue affects uListing: from n/a through <= 2.2.0.
7.2CVE-2026-28138stylemixulisting+1
EPSS score
0.61%
Deserialization of Untrusted Data vulnerability in Stylemix uListing ulisting allows Object Injection.This issue affects uListing: from n/a through <= 2.2.0.