CVE-2025-2127: JoomlaUX JUX Real Estate realties cross site scripting
First published: Sun Mar 09 2025(Updated: )
A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla. It has been classified as problematic. Affected is an unknown function of the file /extensions/realestate/index.php/properties/list/list-with-sidebar/realties. The manipulation of the argument Itemid/jp_yearbuilt leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| JoomlaUX JUX Real Estate |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-2127?
CVE-2025-2127 has been classified as problematic, indicating that it poses a notable risk to affected systems.
How do I fix CVE-2025-2127?
To fix CVE-2025-2127, you should update the JoomlaUX JUX Real Estate extension to the latest version provided by the vendor.
What file is vulnerable in CVE-2025-2127?
The vulnerable file in CVE-2025-2127 is /extensions/realestate/index.php/properties/list/list-with-sidebar/realties.
What function is affected by CVE-2025-2127?
CVE-2025-2127 affects an unknown function, which manipulates the argument Itemid/jp_yearbuilt.
Which software is impacted by CVE-2025-2127?
CVE-2025-2127 impacts JoomlaUX JUX Real Estate version 3.4.0.
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/title
- agent/references
- agent/description
- agent/type
- agent/first-publish-date
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/source
- agent/last-modified-date
- agent/author
- agent/severity
- agent/tags
- agent/event
- vendor/joomlaux
- canonical/joomlaux jux real estate