Skip to content
OpenAdvisories

Product · flexmls

Flexmls® IDX Plugin

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.4
    CVE-2025-0863

    Flexmls® IDX <= 3.14.27 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Flexmls® IDX Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'idx_frame' shortcode in all versions up to, and including, 3.14.27 due to insufficient input sanitization and output escaping on user supplied attribut…

    flexmls Flexmls® IDX Plugin Web / CMS
  • Medium 6.4
    CVE-2024-10552

    Flexmls® IDX Plugin <= 3.14.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via API parameters

    The Flexmls® IDX Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘api_key’ and 'api_secret' parameters in all versions up to, and including, 3.14.26 due to insufficient input sanitization and output escaping. This makes it pos…

    flexmls Flexmls® IDX Plugin Web / CMS
  • Medium 6.1
    CVE-2024-8719

    Flexmls® IDX Plugin <= 3.14.22 - Reflected Cross-Site Scripting

    The Flexmls® IDX Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via several parameters like 'MaxBeds' and 'MinBeds' in all versions up to, and including, 3.14.22 due to insufficient input sanitization and output escaping. This mak…

    flexmls Flexmls® IDX Plugin Web / CMS