Read the docs

homejunction

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

homejunction records in CISA KEV

No homejunction vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-20864 CVE-2025-28921 · GHSA-2qhm-mh5c-2242

WordPress SpatialMatch IDX plugin <= 3.0.9 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in homejunction SpatialMatch IDX spatialmatch-free-lifestyle-search allows Reflected XSS.This issue affects SpatialMatch…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00318 Published 2025-03-26 No fix listed CWE-79
TI-2024-35979 CVE-2024-53781 · GHSA-fwmv-f54w-2j92

WordPress SpatialMatch IDX plugin <= 3.0.9 - CSRF to Stored XSS vulnerability

Priority LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in homejunction SpatialMatch IDX spatialmatch-free-lifestyle-search allows Stored XSS.This issue affects SpatialMatch IDX: from n/a through <= 3.0.9.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00158 Published 2024-12-02 No fix listed CWE-352
Open these records in search →