Next Click Ventures has 6 CVEs on record. The busiest recent month was March 2026 with 6. The median CVSS is 6.8 (medium). None have a confirmed exploitation report. The most common weakness class is CWE-79 (4).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.8
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Worst active — by depth score
CVE-2015-20120High· 8.2RealtyScript 4.0.2 Multiple Time-based Blind SQL Injection57CVE-2015-20118High· 7.2RealtyScript 4.0.2 Stored Cross-Site Scripting via location_name Parameter52CVE-2015-20115High· 7.2RealtyScript 4.0.2 Stored Cross-Site Scripting via File Upload Parameter52CVE-2015-20119Medium· 6.4RealtyScript 4.0.2 Stored Cross-Site Scripting via text Parameter in pages.php47CVE-2015-20116Medium· 6.1RealtyScript 4.0.2 Stored Cross-Site Scripting via CSV File Upload Filename46
Next Click Ventures vulnerabilities
CVEs affecting Next Click Ventures, newest first. Open any entry for full detail, references, and exploit status.
6 CVEsRSS
CVE-2015-20116Medium· 6.1PoCRealtyScript 4.0.2 Stored Cross-Site Scripting via CSV File Upload Filename
Next Click Ventures RealtyScript 4.0.2 fails to properly sanitize CSV file uploads, allowing attackers to inject malicious scripts through filename parameters in multipart form data. Attackers can upload files with XSS payloads in the fi…
CVE-2015-20119Medium· 6.4PoCRealtyScript 4.0.2 Stored Cross-Site Scripting via text Parameter in pages.php
Next Click Ventures RealtyScript 4.0.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious HTML and iframe elements through the text parameter in the pages.php admin interface. Att…
CVE-2015-20120High· 8.2PoCRealtyScript 4.0.2 Multiple Time-based Blind SQL Injection
Next Click Ventures RealtyScript 4.0.2 contains multiple time-based blind SQL injection vulnerabilities that allow unauthenticated attackers to extract database information by injecting SQL code into application parameters. Attackers can…
CVE-2015-20118High· 7.2PoCRealtyScript 4.0.2 Stored Cross-Site Scripting via location_name Parameter
Next Click Ventures RealtyScript 4.0.2 contains a stored cross-site scripting vulnerability in the location_name parameter of the admin locations interface. Attackers can submit POST requests to the locations.php endpoint with JavaScript…
CVE-2015-20117Medium· 5.3PoCRealtyScript 4.0.2 Cross-Site Request Forgery Unauthorized User Creation
Next Click Ventures RealtyScript 4.0.2 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create unauthorized user accounts and administrative users by crafting malicious forms. Attackers can sub…
CVE-2015-20115High· 7.2PoCRealtyScript 4.0.2 Stored Cross-Site Scripting via File Upload Parameter
Next Click Ventures RealtyScript 4.0.2 fails to properly sanitize file uploads, allowing attackers to store malicious scripts through the file POST parameter in admin/tools.php. Attackers can upload files containing JavaScript code that …