Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: RealtyCandy.com Clear all filters
TI-2024-35924 CVE-2024-53726 · GHSA-jrw9-qmpm-pwvq

WordPress RealtyCandy IDX Broker Extended plugin <= 1.5.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Priority LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in RealtyCandy.com RealtyCandy IDX Broker Extended realtycandy-idx-broker-extended allows Stored XSS.This issue affects RealtyCandy IDX Broker Extended: from n/a through <=…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00173 Published 2024-12-02 No fix listed CWE-352