VYPR

Real Estate Manager (Free)

by Joomla

CVEs (1)

  • CVE-2026-100753MedSep 28, 2026
    risk 0.34cvss —epss —

    Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager (Free) < 6.7.9 - The public property-detail page’s “leave a review” form repopulates its title field directly from the request with no escaping and no filtering function of any kind,…