CVE-2019-25742

Name of the Vulnerable Software and Affected Versions Zoner Real Estate version 4.1.1

Description A persistent cross-site scripting issue exists where authenticated agents can inject malicious JavaScript payloads through the Address input field during property creation. These scripts execute when administrators view the property for approval, which can lead to session hijacking and cookie theft.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.