Cross-site scripting (XSS) vulnerability in propview.php in Free Realty 2.9-0.6 and earlier allows remote attackers to execute arbitrary web script or HTML via the sort parameter.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Free_realty |
Free_realty |
* |
2.9_0.6 (including) |
References