This vulnerability (CVE-2025-8303) affects Real Estate Script V5 by EKA Software Computer Information Advertising Services Ltd. It is classified as CWE-79, indicating improper neutralization of input during web page generation, which leads to Cross-Site Scripting (XSS). The vulnerability allows an attacker to inject malicious scripts into web pages generated by the affected software. The affected versions include Real Estate Script V5 with its associated modules up to version 17022026. The vendor did not respond to disclosure attempts, and no official patch or fix has been published. The CVSS 3.1 base score is 6.5, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact.

Successful exploitation of this vulnerability could allow an attacker to execute malicious scripts in the context of the affected web application, potentially leading to limited integrity and availability impacts. There is no confidentiality impact reported. The vulnerability can be exploited remotely without authentication or user interaction. No known exploits are currently in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch is available, users should consider implementing web application firewalls or input validation controls as temporary mitigations. Monitor vendor channels for updates or official fixes.