Medium severity5.3NVD Advisory· Published Mar 16, 2026· Updated Jun 17, 2026
CVE-2015-20113
CVE-2015-20113
Description
Next Click Ventures RealtyScript 4.0.2 contains cross-site request forgery and persistent cross-site scripting vulnerabilities that allow attackers to perform administrative actions and inject malicious scripts. Attackers can craft malicious web pages that execute unauthorized actions when logged-in users visit them, or inject persistent scripts that execute in the application context.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3= 4.0.2+ 1 more
- (no CPE)range: = 4.0.2
- cpe:2.3:a:nextclickventures:realtyscript:4.0.2:*:*:*:*:*:*:*
- Next Click Ventuers/RealtyScriptv5Range: 4.0.2
Patches
Vulnerability mechanics
References
3- www.exploit-db.com/exploits/38496nvdExploitThird Party AdvisoryVDB Entry
- www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5269.phpnvdExploitThird Party Advisory
- www.vulncheck.com/advisories/realtyscript-multiple-cross-site-request-forgerynvdBroken Link
News mentions
0No linked articles in our index yet.