CVE Catalog
CVE-2026-73354
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk0.15%
4th percentile - higher than 4% of all known CVEs
Summary
Unauthenticated Cross Site Scripting (XSS) in SimplyRETS Real Estate IDX <= 3.2.8 versions.
Risk Assessment
XSS attacks can lead to session theft, account takeover, or malware distribution.
Recommendation
Update the plugin to a patched version and implement input filtering mechanisms.
Other vulnerabilities in SimplyRETS Real Estate IDX
Original NVD description (English source)
Unauthenticated Cross Site Scripting (XSS) in SimplyRETS Real Estate IDX <= 3.2.8 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS