Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: homejunction Clear all filters
TI-2025-20864 CVE-2025-28921 · GHSA-2qhm-mh5c-2242

WordPress SpatialMatch IDX plugin <= 3.0.9 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in homejunction SpatialMatch IDX spatialmatch-free-lifestyle-search allows Reflected XSS.This issue affects SpatialMatch…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00318 Published 2025-03-26 No fix listed CWE-79
TI-2024-35979 CVE-2024-53781 · GHSA-fwmv-f54w-2j92

WordPress SpatialMatch IDX plugin <= 3.0.9 - CSRF to Stored XSS vulnerability

Priority LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in homejunction SpatialMatch IDX spatialmatch-free-lifestyle-search allows Stored XSS.This issue affects SpatialMatch IDX: from n/a through <= 3.0.9.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00158 Published 2024-12-02 No fix listed CWE-352