WP Realty - index_ext.php listing_id Parameter Reflected XSS

The wp-realty WordPress plugin was affected by an indexext.php listingid Parameter Reflected XSS security vulnerability...

WordPress WP Realty Cross Site Scripting

\ \ / / / | / | \ V / | | alert1; ------------------------------------------------ Demo: http://realty.drillionnet.com//wp-content/plugins/wp-realty/indexext.php?action=contactfriend&popup=yes&listingid= "/alert1;...