← Database

CVE-2022-3933

MEDIUM CVSS: 5.4 Published: 2022-12-12 Modified: 2026-06-17

Description

The Essential Real Estate WordPress plugin before 3.9.6 does not sanitize and escapes some parameters, which could allow users with a role as low as Admin to perform Cross-Site Scripting attacks.

Affected Platforms

G5Theme Essential Real Estate

Weakness Type

Unknown

References