CyberRota Analysis
AI-GeneratedThe Realtyna Organic IDX and WPL Real Estate WordPress plugins prior to version 5.4.2 are vulnerable to reflected cross-site scripting (XSS) due to insufficient sanitization and escaping of parameters. This flaw allows unauthenticated attackers to execute arbitrary web scripts in the browsers of users who click on specially crafted links. WordPress site administrators using these plugins should prioritize updating to the latest version to mitigate potential exploitation risks.
Original NVD Description
The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.4.2 does not sanitise and escape some of its parameters before reflecting them back in the page, allowing unauthenticated attackers to run arbitrary web scripts in a visitor's browser if they can trick the visitor into following a crafted link (reflected XSS).