CVE-2015-20114CWE-79

RealtyScript 4.0.2 Cross-Site Scripting via Multiple Parameters

Medium · published March 15, 2026

CVSS v4.0
5.1
EPSS
0%
Percentile
19.8
In the wild
Unconfirmed
What it is

Next Click Ventures RealtyScript 4.0.2 contains a cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by injecting malicious input through multiple parameters that are not properly sanitized. Attackers can craft requests with injected script payloads in vulnerable parameters to execute code in users' browser sessions within the context of the affected application.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
EPSS
0.00285 · 19.8th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2026-03-15T18:34Z
EPSS history
Timeline
  • 15 MAR 18:34Z
    RealtyScript 4.0.2 Cross-Site Scripting via Multiple Parameters
    cvelistv5