17 matches found
CVE-2026-73354: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in SimplyRETS Real Estate IDX = 3.2.8 versions...
PT-2026-78338
Unauthenticated Cross Site Scripting XSS in SimplyRETS Real Estate IDX = 3.2.8 versions...
EUVD-2025-14790
Malicious code in bioql PyPI...
EUVD-2025-10945
Malicious code in bioql PyPI...
CVE-2025-31011
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ReichertBrothers SimplyRETS Real Estate IDX simply-rets allows Reflected XSS.This issue affects SimplyRETS Real Estate IDX: from n/a through = 3.2.2...
CVE-2025-31011
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ReichertBrothers SimplyRETS Real Estate IDX simply-rets allows Reflected XSS.This issue affects SimplyRETS Real Estate IDX: from n/a through = 3.2.2...
CVE-2025-31011
CVE-2025-31011 affects ReichertBrothers SimplyRETS Real Estate IDX (WordPress plugin). Described as a Reflected Cross-Site Scripting vulnerability in versions n/a through 3.0.3. CVSS v3.1 base score 7.1 (HIGH) with network attack vector, no privileges required, user interaction required, and part...
PT-2025-16331 · Reichertbrothers · Reichertbrothers Simplyrets Real Estate Idx
Name of the Vulnerable Software and Affected Versions: ReichertBrothers SimplyRETS Real Estate IDX versions n/a through 3.0.3 Description: The issue affects ReichertBrothers SimplyRETS Real Estate IDX, allowing Reflected XSS due to improper neutralization of input during web page generation. This...
CVE-2025-31011: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ReichertBrothers SimplyRETS Real Estate IDX simply-rets allows Reflected XSS.This issue affects SimplyRETS Real Estate IDX: from n/a through = 3.2.2...
WordPress plugin SimplyRETS Real Estate IDX 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2025-31010
Cross-Site Request Forgery CSRF vulnerability in ReichertBrothers SimplyRETS Real Estate IDX simply-rets allows Cross Site Request Forgery.This issue affects SimplyRETS Real Estate IDX: from n/a through = 3.0.5...
CVE-2025-31010
Cross-Site Request Forgery CSRF vulnerability in ReichertBrothers SimplyRETS Real Estate IDX simply-rets allows Cross Site Request Forgery.This issue affects SimplyRETS Real Estate IDX: from n/a through = 3.0.5...
CVE-2025-31010
CSRF flaw in SimplyRETS Real Estate IDX (ReichertBrothers) affects version(s)
CVE-2025-31010 WordPress SimplyRETS Real Estate IDX plugin <= 3.0.5 - CSRF to Multiple Admin Actions vulnerability
Cross-Site Request Forgery CSRF vulnerability in ReichertBrothers SimplyRETS Real Estate IDX simply-rets allows Cross Site Request Forgery.This issue affects SimplyRETS Real Estate IDX: from n/a through = 3.0.5...
CVE-2025-31010: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in ReichertBrothers SimplyRETS Real Estate IDX simply-rets allows Cross Site Request Forgery.This issue affects SimplyRETS Real Estate IDX: from n/a through = 3.0.5...
WordPress plugin SimplyRETS Real Estate IDX 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
CVE-2024-12491: Improper Neutralization of Input During Web Page Generation
The SimplyRETS Real Estate IDX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'srsearchform' shortcode in all versions up to, and including, 2.11.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible fo...