Vulners
Lucene search
CVE-2025-2127
🗓️ 09 Mar 2025 17:31:03Reported by VulDBType 
cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 90 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | The vulnerability of the JoomlaUX JUX Real Estate plugin for the Joomla content management system (CMS) arises from insufficient measures taken to protect the structure of web pages. This allows attackers to execute cross-site scripting attacks. | 17 Dec 202500:00 | – | bdu_fstec |
 | CVE-2025-2127 | 9 Mar 202517:37 | – | circl |
 | JoomlaUX JUX Real Estate 代码注入漏洞 | 9 Mar 202500:00 | – | cnnvd |
 | CVE-2025-2127 JoomlaUX JUX Real Estate realties cross site scripting | 9 Mar 202517:31 | – | cvelist |
 | EUVD-2025-7512 | 3 Oct 202520:07 | – | euvd |
 | JoomlaUX JUX Real Estate 3.4.0 - Reflected XSS | 1 Jul 202603:36 | – | nuclei |
 | CVE-2025-2127 | 9 Mar 202518:15 | – | nvd |
 | JUX Real Estate 3.4.0 Cross Site Scripting | 10 Mar 202500:00 | – | packetstorm |
 | PT-2025-10455 · Joomlaux · Joomlaux Jux Real Estate | 9 Mar 202500:00 | – | ptsecurity |
 | CVE-2025-2127 | 12 Mar 202511:30 | – | redhatcve |
10
Node
[
{
"vendor": "JoomlaUX",
"product": "JUX Real Estate",
"versions": [
{
"version": "3.4.0",
"status": "affected"
}
]
}
]| Source | Link |
|---|---|
| vuldb | www.vuldb.com/ |
| vuldb | www.vuldb.com/ |
| vuldb | www.vuldb.com/ |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| Itemid | query param | extensions/realestate/index.php/properties/list/list-with-sidebar/realties | XSS via Itemid parameter in Real Estate listing | CWE-79, CWE-94 |
| jp_yearbuilt | query param | extensions/realestate/index.php/properties/list/list-with-sidebar/realties | XSS via jp_yearbuilt parameter in Real Estate listing | CWE-79, CWE-94 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 09:06Current
4.4Medium risk
Vulners AI Score4.4
CVSS 3.14.3 - 6.1
CVSS 25
CVSS 45.3
CVSS 34.3
EPSS0.0097
SSVC