Medium · 5.4 CVE-2025-54698 EUVD-2025-24696GHSA-rrg4-8849-qvhv

WordPress Classified Listing Plugin plugin <= 5.0.0 - Content Injection Vulnerability

Published Aug 14, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: RadiusTheme Product: Classified Listing

Description

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in RadiusTheme Classified Listing classified-listing allows Code Injection.This issue affects Classified Listing: from n/a through <= 5.0.0.

Affected products

Vendor	Product	Affected	Fixed
RadiusTheme	Classified Listing	≤ 5.0.0	—

References

https://patchstack.com/database/Wordpress/Plugin/classified-listing/vulnerability/wordpress-classified-listing-plugin-plugin-5-0-0-content-injection-vulnerability?_s_id=cve vdb-entry