Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-31556 EUVD-2025-8809GHSA-m348-74wh-fj2c

WordPress IMPress for IDX Broker plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability

Published Mar 31, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: IDX Broker Product: IMPress for IDX Broker

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IDX Broker IMPress for IDX Broker idx-broker-platinum allows Stored XSS.This issue affects IMPress for IDX Broker: from n/a through <= 3.2.3.

Affected products

VendorProductAffectedFixed
IDX Broker IMPress for IDX Broker ≤ 3.2.3 —

References