https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 16:59:25 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-370227 EUVD-2026-370227 https://cve.radiocsirt.org/vuln/euvd-2026-370227 https://cve.radiocsirt.org/vuln/fkie_cve-2026-91014 <p>The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.4.2 does not sanitise and escape some of its parameters before reflecting them back in the page, allowing unauthenticated attackers to run arbitrary web scripts in a visitor&#39;s browser if they can trick the visitor into following a crafted link (reflected XSS).</p> <p>The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.4.2 does not sanitise and escape some of its parameters before reflecting them back in the page, allowing unauthenticated attackers to run arbitrary web scripts in a visitor&#39;s browser if they can trick the visitor into following a crafted link (reflected XSS).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-91014 https://cve.radiocsirt.org/vuln/ghsa-qm73-3q75-wf7w <p>The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.4.2 does not sanitise and escape some of its parameters before reflecting them back in the page, allowing unauthenticated attackers to run arbitrary web scripts in a visitor&#39;s browser if they can trick the visitor into following a crafted link (reflected XSS).</p> <p>The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.4.2 does not sanitise and escape some of its parameters before reflecting them back in the page, allowing unauthenticated attackers to run arbitrary web scripts in a visitor&#39;s browser if they can trick the visitor into following a crafted link (reflected XSS).</p> https://cve.radiocsirt.org/vuln/ghsa-qm73-3q75-wf7w