Thethinkery vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Thethinkery products: 1 record(s), with severity, exploitation and fixes.

Joomla iProperty Real Estate 1

Exploited only (KEV) →

CVE-2023-54361 Medium · 6.1 CWE-79 Apr 9, 2026

Joomla iProperty Real Estate 4.1.1 Reflected XSS via filter_keyword

Joomla iProperty Real Estate 4.1.1 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the filter_keyword parameter. Attackers can craft URLs containing JavaScript payloads in the filter_keyword GET parameter of the all-properties-with-map endpoint to execute arbitrary code in victim browsers and steal session tokens or credentials.