CVE Intelligence

Thethinkery Joomla iProperty Real Estate vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Thethinkery Joomla iProperty Real Estate: 1 record(s), with affected versions and fixes.

CVE-2023-54361 Medium · 6.1 CWE-79 Apr 9, 2026
Joomla iProperty Real Estate 4.1.1 Reflected XSS via filter_keyword
Joomla iProperty Real Estate 4.1.1 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the filter_keyword parameter. Attackers can craft URLs containing JavaScript payloads in the filter_keyword GET parameter of the all-properties-with-map endpoint to execute arbitrary code in victim browsers and steal session tokens or credentials.