CVE-2026-73354

HighCVSS 7.1

Published: 19/08/2026(UTC)Updated: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Summary

Unauthenticated Cross Site Scripting (XSS) in SimplyRETS Real Estate IDX <= 3.2.8 versions.

XSS attacks can lead to session theft, account takeover, or malware distribution.

Update the plugin to a patched version and implement input filtering mechanisms.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in SimplyRETS Real Estate IDX <= 3.2.8 versions.