The wp-listings plugin prior to 2.0.2 for WordPress has includes/views/single-listing.php XSS.
agentevolution impress listings