Stored XSS Vulnerability in Estatebud Properties & Listings Plugin

CVE-2025-23994

What is CVE-2025-23994?

A stored Cross-site Scripting (XSS) vulnerability has been identified in the Estatebud – Properties & Listings plugin. This flaw arises from improper neutralization of input during web page generation, which allows attackers to inject malicious scripts into pages viewed by users. As a result, malicious actors can execute arbitrary JavaScript in the context of the user’s browser, potentially leading to data theft or unauthorized actions. The vulnerability affects versions of the plugin from n/a to 5.5.0, highlighting the need for users to apply security measures and keep the plugin updated.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References