Security Advisory

CVE-2021-24387

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-07-06 11:03:29
Last updated 2024-08-03 19:28:23
Assigner WPScan
State PUBLISHED

Description

The WP Pro Real Estate 7 WordPress theme before 3.1.1 did not properly sanitise the ct_community parameter in its search listing page before outputting it back in it, leading to a reflected Cross-Site Scripting which can be triggered in both unauthenticated or authenticated user context