PT-2026-20270 · Unknown · Eka Software Real Estate Script

Çetin Bi̇ni̇ci̇ · Published 2026-02-17 · Updated 2026-02-17 · CVE-2025-8303

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions EKA Software Real Estate Script versions through 17022026

Description The software contains an Improper Neutralization of Input During Web Page Generation issue, also known as Cross-Site Scripting (XSS). This allows for the execution of malicious scripts within the application. The vendor was contacted regarding this issue but did not respond.

Recommendations Update to a version later than 17022026.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-8303

Affected Products

Eka Software Real Estate Script

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-8303 · Security Note
• https://t.me/cveNotify/152153 · Telegram Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0068 · Note
• https://usom.gov.tr/bildirim/tr-26-0068 · Note
• https://t.me/CVEtracker/44869 · Telegram Post
• https://twitter.com/CVEnew/status/2023741790453723285 · Twitter Post