https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T11:25:48.399878+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2015-20115 CVE-2015-20115 — RealtyScript 4.0.2 Stored Cross-Site Scripting via File Upload Parameter 2026-10-15T11:25:48.414334+00:00

Affected: Next Click Ventures RealtyScript

Next Click Ventures RealtyScript 4.0.2 fails to properly sanitize file uploads, allowing attackers to store malicious scripts through the file POST parameter in admin/tools.php. Attackers can upload files containing JavaScript code that executes in the context of admin/tools.php when accessed by other users.