← CVE Tracker
7.1HIGH

CVE-2025-9969 — Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability…

Unknown · Unknown · Published 19 Sept 2025 · Modified 30 Sept 2026

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Vizly Web Design Real Estate Packages allows Content Spoofing, CAPEC - 593 - Session Hijacking, CAPEC - 591 - Reflected XSS. This issue affects Real Estate Packages: before 5.1.

References

What to do
  1. Check whether Unknown is in your asset inventory.
  2. Patch in the next maintenance window; prioritise internet-facing systems.
  3. Record the decision in your risk register for audit evidence.
Alert me on similar CVEs →
Share

Link: adminadda.com/cve/CVE-2025-9969