CVE-2017-18532

The Realty plugin for WordPress (pre-1.1.0) has multiple XSS issues (CVE-2017-18532). NVD/Nuclei describe authenticated XSS in the plugin, CWE-79, potentially allowing injected JavaScript in victims’ browsers. CVSSv3.0: 6.1 (NETWORK, LOW AC, PR:N, UI:R, Scope:Changed; Confidentiality/Integrity: L...