Vulnerability Description
WordPress Theme Zoner Real Estate 4.1.1 contains a persistent cross-site scripting vulnerability that allows authenticated agents to inject malicious scripts through the Address input field when creating properties. Attackers can inject JavaScript payloads in the property creation form that execute when administrators view the property for approval, enabling cookie theft and session hijacking.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://fruitfulcode.com/
- https://themeforest.net/item/zoner-real-estate-wordpress-theme/9099226
- https://www.exploit-db.com/exploits/47436
- https://www.vulncheck.com/advisories/wordpress-theme-zoner-real-estate-persisten
FAQ
What is CVE-2019-25742?
CVE-2019-25742 is a vulnerability with a CVSS score of 5.4 (MEDIUM). WordPress Theme Zoner Real Estate 4.1.1 contains a persistent cross-site scripting vulnerability that allows authenticated agents to inject malicious scripts through the Address input field when creat...
How severe is CVE-2019-25742?
CVE-2019-25742 has been rated MEDIUM with a CVSS base score of 5.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-25742?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.