VULNERABILITY INTELLIGENCE

CVE-2025-8303

CVSS score6.5 MEDIUM
EPSS probability0.34%
CISA KEVNot currently listed
Published2026-02-17
Last modified2026-06-17

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in EKA Software Computer Information Advertising Services Ltd. Real Estate Script V5 (With Doping Module – Store Module – New Language System) allows Cross-Site Scripting (XSS). This issue affects Real Estate Script V5 (With Doping Module – Store Module – New Language System): through 17022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Primary references

  • TR-CERT — government-resource, broken-link
  • TR-CERT — government-resource