Joomla iProperty Real Estate 4.1.1 Reflected XSS via filter_keyword
Vulnerability Description
Joomla iProperty Real Estate 4.1.1 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the filter_keyword parameter. Attackers can craft URLs containing JavaScript payloads in the filter_keyword GET parameter of the all-properties-with-map endpoint to execute arbitrary code in victim browsers and steal session tokens or credentials.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-54361
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- CraCkEr
Affected Vendor
Thethinkery
View all reports →