The Essential WP Real Estate WordPress plugin through 1.1.3 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://wpscan.com/vulnerability/e2f97636-4c67-409a-83c6-ad6255aa2cc5/ | Exploit Third Party Advisory |
Configurations
History
18 Apr 2025, 02:00
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Smartdatasoft
Smartdatasoft essential Wp Real Estate |
|
| CPE | cpe:2.3:a:smartdatasoft:essential_wp_real_estate:*:*:*:*:*:wordpress:*:* | |
| References | () https://wpscan.com/vulnerability/e2f97636-4c67-409a-83c6-ad6255aa2cc5/ - Exploit, Third Party Advisory |
03 Feb 2025, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-03 06:15
Updated : 2025-04-18 02:00
NVD link : CVE-2024-13347
Mitre link : CVE-2024-13347
JSON object : View
Products Affected
smartdatasoft
- essential_wp_real_estate
CWE
No CWE.