Advisories · Technology

Next Click Ventures RealtyScript.

Every CVE that names Next Click Ventures RealtyScript among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2015-20120 CVE record

CVSS 8.8 High

RealtyScript 4.0.2 Multiple Time-based Blind SQL Injection
- Next Click Ventures RealtyScript
- SQL injection
Not analysed yet 15 Mar 2026
CVE-2015-20119 CVE record

CVSS 5.1 Medium

RealtyScript 4.0.2 Stored Cross-Site Scripting via text Parameter in pages.php
- Next Click Ventures RealtyScript
- Cross-site scripting (XSS)
Not analysed yet 15 Mar 2026
CVE-2015-20118 CVE record

CVSS 5.1 Medium

RealtyScript 4.0.2 Stored Cross-Site Scripting via location_name Parameter
- Next Click Ventures RealtyScript
- Cross-site scripting (XSS)
Not analysed yet 15 Mar 2026
CVE-2015-20117 CVE record

CVSS 6.9 Medium

RealtyScript 4.0.2 Cross-Site Request Forgery Unauthorized User Creation
- Next Click Ventures RealtyScript
- Cross-site request forgery (CSRF)
Not analysed yet 15 Mar 2026
CVE-2015-20116 CVE record

CVSS 5.1 Medium

RealtyScript 4.0.2 Stored Cross-Site Scripting via CSV File Upload Filename
- Next Click Ventures RealtyScript
- Cross-site scripting (XSS)
Not analysed yet 15 Mar 2026
CVE-2015-20115 CVE record

CVSS 5.1 Medium

RealtyScript 4.0.2 Stored Cross-Site Scripting via File Upload Parameter
- Next Click Ventures RealtyScript
- Cross-site scripting (XSS)
Not analysed yet 15 Mar 2026