Cross-Site Scripting Vulnerability in RealtyScript by Next Click Ventures
CVE-2015-20114

5.1MEDIUM

Key Information:

Vendor

Next Click Ventuers

Status
Realtyscript
Vendor
CVE Published:
15 March 2026

Badges

👾 Exploit Exists

What is CVE-2015-20114?

RealtyScript 4.0.2 by Next Click Ventures has a vulnerability that allows attackers to perform cross-site scripting (XSS) attacks. This flaw stems from improper sanitization of multiple input parameters, enabling malicious users to inject arbitrary HTML and script code. Attackers can send crafted requests containing injected script payloads through these vulnerable parameters, potentially compromising users' browser sessions and executing harmful code within the context of the application.

Affected Version(s)

RealtyScript 4.0.2

References

https://www.exploit-db.com/exploits/38496
exploit
http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-526...
vendor-advisory
https://www.vulncheck.com/advisories/realtyscript-cross-s...
third-party-advisory

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.