Description
Unauthenticated Cross Site Scripting (XSS) in Houzez Property Feed <= 2.5.48 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Property Hive | Houzez Property Feed | ≤ 2.5.48 | — |
High · 7.1
CVE-2026-65560
EUVD-2026-53985GHSA-rf5c-q935-9wph
WordPress Houzez Property Feed plugin <= 2.5.48 - Cross Site Scripting (XSS) vulnerability
Published Aug 6, 2026 · Updated Aug 6, 2026 · Assigned by Patchstack