CVE-2025-1196 code-projects Real Estate Property Management System search.php cross site scripting

A vulnerability, which was classified as problematic, was found in code-projects Real Estate Property Management System 1.0. Affected is an unknown function of the file /search.php. The manipulation of the argument PropertyName leads to cross site scripting. It is possible to launch the attack...

CVE-2025-1195

CVE-2025-1195 concerns the Code-Projects Real Estate Property Management System 1.0. According to the sources, the vulnerability is triggered by manipulation of the CategoryId parameter in the /Admin/EditCategory endpoint, resulting in cross-site scripting (XSS). The issue is described as exploit...

CVE-2025-1195 code-projects Real Estate Property Management System EditCategory cross site scripting

A vulnerability, which was classified as problematic, has been found in code-projects Real Estate Property Management System 1.0. This issue affects some unknown processing of the file /Admin/EditCategory. The manipulation of the argument CategoryId leads to cross site scripting. The attack may b...

CVE-2025-1195 code-projects Real Estate Property Management System EditCategory cross site scripting

A vulnerability, which was classified as problematic, has been found in code-projects Real Estate Property Management System 1.0. This issue affects some unknown processing of the file /Admin/EditCategory. The manipulation of the argument CategoryId leads to cross site scripting. The attack may b...

CVE-2024-13421

The Real Estate 7 WordPress theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.1. This is due to the plugin not properly restricting the roles allowed to be selected during registration. This makes it possible for unauthenticated attackers to...

CVE-2024-13421

The Real Estate 7 WordPress theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.1. This is due to the plugin not properly restricting the roles allowed to be selected during registration. This makes it possible for unauthenticated attackers to...

CVE-2024-13421 Real Estate 7 WordPress <= 3.5.1 - Unauthenticated Privilege Escalation to Administrator

The Real Estate 7 WordPress theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.1. This is due to the plugin not properly restricting the roles allowed to be selected during registration. This makes it possible for unauthenticated attackers to...

CVE-2024-13421

CVE-2024-13421 affects the Real Estate 7 WordPress theme for WordPress, up to version 3.5.1. Root cause: the registration flow does not properly restrict which user roles can be assigned, enabling unauthenticated attackers to register a new administrative user account. Impact is privilege escalat...

CVE-2024-13421 Real Estate 7 WordPress <= 3.5.1 - Unauthenticated Privilege Escalation to Administrator

The Real Estate 7 WordPress theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.1. This is due to the plugin not properly restricting the roles allowed to be selected during registration. This makes it possible for unauthenticated attackers to...

PT-2025-6435 · WordPress · The Real Estate 7

Name of the Vulnerable Software and Affected Versions: The Real Estate 7 WordPress theme for WordPress versions up to, and including, 3.5.1 Description: The issue is due to the plugin not properly restricting the roles allowed to be selected during registration, making it possible for...

Code-Projects Real Estate Property Management System SQL注入漏洞

Code-Projects Real Estate Property Management System is a Code-Projects open source real estate property management system. A SQL injection vulnerability exists in Code-Projects Real Estate Property Management System version 1.0, which stems from an incorrect manipulation of the parameter userhas...

WordPress plugin Real Estate 7 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2025-6842 · Unknown · Code-Projects Real Estate Property Management System

Name of the Vulnerable Software and Affected Versions: code-projects Real Estate Property Management System version 1.0 Description: A critical vulnerability has been found in the code-projects Real Estate Property Management System. The issue affects an unknown functionality of the file /...

Code-Projects Real Estate Property Management System 代码注入漏洞

Code-Projects Real Estate Property Management System is an open source real estate property management system from Code-Projects. A code injection vulnerability exists in Code-Projects Real Estate Property Management System version 1.0, which stems from an incorrect manipulation of the parameter...

Code-Projects Real Estate Property Management System 代码注入漏洞

Code-Projects Real Estate Property Management System is a Code-Projects open source real estate property management system. A code injection vulnerability exists in Code-Projects Real Estate Property Management System version 1.0, which stems from an incorrect operation of the parameter CategoryI...

WordPress Real Estate 7 theme <= 3.5.0 - Unauthenticated Privilege Escalation to Administrator vulnerability

Unauthenticated Privilege Escalation to Administrator vulnerability discovered by Lucio Sá in WordPress Theme Real Estate 7 versions = 3.5.0...

CVE-2025-1171

A vulnerability classified as problematic was found in code-projects Real Estate Property Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /Admin/CustomerReport.php. The manipulation of the argument Address leads to cross site scripting. The attack can...

CVE-2025-1171 code-projects Real Estate Property Management System CustomerReport.php cross site scripting

A vulnerability classified as problematic was found in code-projects Real Estate Property Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /Admin/CustomerReport.php. The manipulation of the argument Address leads to cross site scripting. The attack can...

CVE-2025-1171 code-projects Real Estate Property Management System CustomerReport.php cross site scripting

A vulnerability classified as problematic was found in code-projects Real Estate Property Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /Admin/CustomerReport.php. The manipulation of the argument Address leads to cross site scripting. The attack can...

CVE-2025-1171

CVE-2025-1171 affects Code-Projects Real Estate Property Management System 1.0. The vulnerability is an cross-site scripting (XSS) flaw in an unknown function of /Admin/CustomerReport.php, triggered by manipulating the Address parameter. It is exploitable remotely and the exploit has been disclos...