Skip to content
OpenAdvisories
High · 7.1 CVE-2025-9969 EUVD-2025-30296GHSA-m24j-vgh7-vrcm

Reflected XSS in Vizly Web Design's Real Estate Packages

Published Sep 19, 2025 · Updated Jun 5, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Vizly Web Design Real Estate Packages allows Content Spoofing, CAPEC - 593 - Session Hijacking, CAPEC - 591 - Reflected XSS.

This issue affects Real Estate Packages: before 5.1.

Affected products

VendorProductAffectedFixed
Vizly Web Design Real Estate Packages < 5.1 5.1

References