PT-2026-68556
CVE-2026-65560
·
تاريخ النشر
2026-08-06
·
تاريخ التحديث
2026-08-06
الوصف من
CVSS 3.1
7.1
عاليةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Houzez Property Feed versions prior to 2.5.49
Description
The Houzez Property Feed plugin for WordPress contains a stored Cross-Site Scripting (XSS) flaw. This issue occurs because the software fails to properly sanitize input and escape output, allowing unauthenticated attackers to inject arbitrary web scripts into pages. These scripts execute automatically when a user visits the affected page.
Recommendations
Update Houzez Property Feed to a version newer than 2.5.48.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾