PT-2026-94179 · Realtyna · Organic Idx+1
CVSS v3.1
7.1
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin versions prior to 5.4.2
Description
Insufficient sanitization and escaping of parameters in the Location Selector endpoint allow unauthenticated attackers to execute arbitrary web scripts in a visitor's browser via reflected Cross-Site Scripting (XSS). This occurs when a visitor is tricked into following a specially crafted link.
Recommendations
Update to version 5.4.2 or later.
Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Organic Idx
Wp Realestate