CVE-2012-4278

CVE-2012-4278 describes multiple cross-site scripting (XSS) vulnerabilities in Free Realty 3.1-0.6. The issues allow remote attackers to inject arbitrary scripts via: (1) the notes parameter to admin/agenteditor.php; (2) the title, (3) previewdesc, (4) fulldesc, or (5) notes parameter to agentadm...