CVE-2026-65560

Unauthenticated Cross Site Scripting (XSS) in Houzez Property Feed <= 2.5.48 versions.

Score

CVSS 3.1 7.1 High

Status

Deferred - audit@patchstack.com

Published

2026-08-06

Last modified

2026-10-24

Weaknesses

CWE-79

Affected products

• Houzez Property Feed (Property Hive)

References

• https://patchstack.com/database/wordpress/plugin/houzez-property-feed/vulnerability/wordpress-houzez-property-feed-plug…