CVE-2025-9969: Vizly Web Design Real Estate Packages

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Vizly Web Design Real Estate Packages allows Content Spoofing, CAPEC - 593 - Session Hijacking, CAPEC - 591 - Reflected XSS. This issue affects Real Estate Packages: before 5.1.

Affected products

• Vizly Web Design Real Estate Packages: before 5.1 (fixed in 5.1)

Published 2025-09-19. Last modified 2026-09-30.