Cross-site Scripting Vulnerability in NotFound Essential WP Real Estate Plugin
CVE-2025-23857
6.1MEDIUM
What is CVE-2025-23857?
The NotFound Essential WP Real Estate plugin contains a vulnerability that allows for reflected cross-site scripting (XSS) attacks due to improper input neutrality during web page generation. This issue could enable attackers to inject malicious scripts, potentially compromising user data and website integrity. It affects versions from n/a through 1.1.3, making it imperative for users of this plugin to implement necessary security measures to mitigate such risks.
Affected Version(s)
Essential WP Real Estate <= 1.1.3