Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 14:09:52 +0000 CVE-2026-91014 — Realtyna Organic IDX plugin + WPL Real Estate < 5.4.2 - Reflected XSS via Location Selector Endpoint https://db.gcve.eu/vuln/cve-2026-91014 <p><strong>Affected:</strong> Unknown Realtyna Organic IDX plugin + WPL Real Estate</p> <p>The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.4.2 does not sanitise and escape some of its parameters before reflecting them back in the page, allowing unauthenticated attackers to run arbitrary web scripts in a visitor&#39;s browser if they can trick the visitor into following a crafted link (reflected XSS).</p> <p><strong>Affected:</strong> Unknown Realtyna Organic IDX plugin + WPL Real Estate</p> <p>The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.4.2 does not sanitise and escape some of its parameters before reflecting them back in the page, allowing unauthenticated attackers to run arbitrary web scripts in a visitor&#39;s browser if they can trick the visitor into following a crafted link (reflected XSS).</p> https://db.gcve.eu/vuln/cve-2026-91014