medium6.8
CVE-2024-13347
The Essential WP Real Estate WordPress plugin through 1.1.3 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Sit…
Impact
The Essential WP Real Estate WordPress plugin through 1.1.3 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Smartdatasoft | Essential Wp Real Estate | through 1.1.3 |