CVE-2024-52448
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Nov 20, 2024
Updated: Nov 21, 2024
CWE ID 22
Summary
CVE-2024-52448 is a newly identified vulnerability affecting the WebCodingPlace Ultimate Classified Listings plugin. This issue involves an improper limitation of file pathnames that enables attackers to traverse restricted directories and execute PHP Local File Inclusions. This vulnerability jeopardizes installations of Ultimate Classified Listings from undisclosed versions up to 1.4. Successful exploitation may lead to arbitrary code execution and potential compromise of affected systems.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share