CVE-2025-9940 in Real Estate Management System

Riassunto

di MITRE • 04/09/2025

A vulnerability was detected in CodeAstro Real Estate Management System 1.0. This affects an unknown function of the file /feature.php. Performing manipulation of the argument msg results in cross site scripting. The attack can be initiated remotely. The exploit is now public and may be used.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsabile: VulDB
• Divulgazione: 04/09/2025
• Moderazione: accettato
• Voce: VDB-322342
• CPE: pronto
• CWE: CWE-79 (confermato)
• Sfruttamento: Scaricare
• CVSS: 5.4 (NVD)
• EPSS: 0.00256
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-9940
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-9940
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-9940/