logo
DATABASE RESOURCES PRICING ABOUT US

Realteo < 1.2.4 - Unauthenticated Reflected Cross-Site Scripting (XSS)

Description

The plugin, used by the Findeo Theme, did not properly sanitise the keyword_search, search_radius. _bedrooms and _bathrooms GET parameters before outputting them in its properties page, leading to an unauthenticated reflected Cross-Site Scripting issue.


Related