6.1 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
65.5%
Multiple cross-site scripting (XSS) vulnerabilities in Xstate Real Estate 1.0 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) home.html or (2) lands.html.
osvdb.org/57671
osvdb.org/57672
secunia.com/advisories/36529
exchange.xforce.ibmcloud.com/vulnerabilities/52970
www.exploit-db.com/exploits/9565