CVE

CVE-2021-24387

6.1

CVSS

Description

The WP Pro Real Estate 7 WordPress theme before 3.1.1 did not properly sanitise the ct_community parameter in its search listing page before outputting it back in it, leading to a reflected Cross-Site Scripting which can be triggered in both unauthenticated or authenticated user context

Attack Vector

Privileges Req.

User Interaction

wp pro real estate 7

Updated Sep 26, 2026View on NVD →

S4E scanner

mediumProduct Based Web Vulnerabilities~10 seconds

CVE-2021-24387 Scanner

Detects 'Cross-Site Scripting (XSS)' vulnerability in WP Pro Real Estate 7 theme for WordPress affects v. before 3.1.1.

Used 2.7k times · 3.3k assets checked · domain, ipv4, subdomain

Scanner page →Run scanner

CVE history: wp pro real estate 7

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →