The iProperty Real Estate Joomla template allows real estate agents to upload photos, add categories, sub-categories, agent profiles, companies as well as new homes for sale, rent and more.
Researcher from exploitdb website CraCkEr has found vulnerability in this template. Referring to the same author, this type of vulnerability allows hackers to manipulate the content of information on the website. This type of XSS threat is extremely dangerous for the stability and security of a website.
The threat can send the victim a virus URL link in email or direct message, where you can perform a wide variety of actions, such as stealing session tokens or credentials. Developers have not yet released a new version update to fix this threat.