Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-8303 EUVD-2025-207688GHSA-3866-72wv-xq49

XSS in EKA Software's Real Estate Script V5 (With Doping Module – Store Module – New Language System)

Published Feb 17, 2026 · Updated Jun 5, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in EKA Software Computer Information Advertising Services Ltd. Real Estate Script V5 (With Doping Module – Store Module – New Language System) allows Cross-Site Scripting (XSS).

This issue affects Real Estate Script V5 (With Doping Module – Store Module – New Language System): through 17022026.

NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

VendorProductAffectedFixed
EKA Software Computer Information Advertising Services Real Estate Script V5 (With Doping Module – Store Module – New Language System) ≤ 17022026 —

References