https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T07:05:15.746170+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2015-20118 CVE-2015-20118 — RealtyScript 4.0.2 Stored Cross-Site Scripting via location_name Parameter 2026-10-15T07:05:15.770792+00:00

Affected: Next Click Ventures RealtyScript

Next Click Ventures RealtyScript 4.0.2 contains a stored cross-site scripting vulnerability in the location_name parameter of the admin locations interface. Attackers can submit POST requests to the locations.php endpoint with JavaScript payloads in the location_name field to execute arbitrary code in administrator browsers.