TI-2026-13909 CVE-2026-16684 · GHSA-h45j-xv2v-ffgq
Cross-site scripting in mervb1 Easy Property Listings
Priority LOW 28
The Easy Property Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'facebook' User Contact Method in all versions up to, and including, 3.5.24 due to insufficient input sanitization and outp…