PT-2026-25716 · Nextclickventures · Realtyscript

Published 2026-03-15 · Updated 2026-03-16 · CVE-2015-20113

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions RealtyScript version 4.0.2

Description RealtyScript 4.0.2 contains cross-site request forgery and persistent cross-site scripting issues that allow attackers to perform administrative actions and inject malicious scripts. Attackers can create malicious web pages that execute unauthorized actions when authenticated users visit them, or inject persistent scripts that execute within the application context.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2015-20113

Affected Products

Realtyscript

References · 5

• 🔥 https://zeroscience.mk/en/vulnerabilities/ZSL-2015-5269.php · Exploit
• 🔥 https://exploit-db.com/exploits/38496 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-20113 · Security Note
• https://vulncheck.com/advisories/realtyscript-multiple-cross-site-request-forgery · Note
• https://t.me/CVEtracker/47443 · Telegram Post