Cross-site Scripting Vulnerability in Rameez Iqbal Real Estate Manager
CVE-2025-58253

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Real Estate Manager
Vendor
CVE Published:
22 September 2025

What is CVE-2025-58253?

The Rameez Iqbal Real Estate Manager contains a vulnerability that allows for DOM-Based Cross-site Scripting (XSS) attacks. This issue arises from improper handling of user input during the generation of web pages, which could enable an attacker to execute arbitrary JavaScript in the context of the user's browser. Such vulnerabilities can lead to a range of security issues, including data theft and session hijacking, affecting the integrity and confidentiality of user data.

Affected Version(s)

Real Estate Manager <= 7.3

References

https://patchstack.com/database/wordpress/plugin/real-est...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Muhammad Yudha - DJ (Patchstack Alliance)
JSON
.