Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24387

Real Estate 7 < 3.1.1 - Reflected Cross-Site Scripting (XSS)

Description

The WP Pro Real Estate 7 WordPress theme before 3.1.1 did not properly sanitise the ct_community parameter in its search listing page before outputting it back in it, leading to a reflected Cross-Site Scripting which can be triggered in both unauthenticated or authenticated user context

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Contempoinc WP Pro Real Estate 7

  • 3.1.1 to < 3.1.1affected

References