Advisories · Technology
propertyhive Houzez Property Feed.
Every CVE that names propertyhive Houzez Property Feed among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.9 Medium
Houzez Property Feed <= 2.5.46 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
- propertyhive Houzez Property Feed
- SQL injection
- CVSS 4.3 Medium
Houzez Property Feed <= 2.4.21 - Cross-Site Request Forgery to Property Feed Export Deletion
- propertyhive Houzez Property Feed
- Cross-site request forgery (CSRF)