The WP Pro Real Estate 7 WordPress theme prior to 3.1.1 did not properly sanitise the ct_community parameter in its search listing page before outputting it back in it, leading to a reflected Cross-Site Scripting which can be triggered in both unauthenticated or authenticated user context
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
contempothemes real estate 7 |