Nextclickventures' vulnerability profile centers on RealtyScript, a web-based real estate management application, with a durable signal around application-layer input-handling weaknesses including cross-site scripting, cross-site request forgery, and SQL injection. The vendor's disclosures skew toward serious outcomes, with a meaningful share reaching critical severity, reflecting the common pattern of web applications handling sensitive transactional and customer data without adequate input validation and CSRF protections. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Nextclickventures over time
Signals from CVEs in this vendor scope (9 CVEs).
9 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2015-20121CRITICAL Next Click Ventures RealtyScript 4.0.2 contains SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting arbitrary SQL code th | Mar 16, 2026 | 9.8 | 30 | NO | NO |
CVE-2015-20120CRITICAL Next Click Ventures RealtyScript 4.0.2 contains multiple time-based blind SQL injection vulnerabilities that allow unauthenticated attackers to extract database information by inje | Mar 16, 2026 | 9.8 | 30 | NO | NO |
CVE-2015-20117HIGH Next Click Ventures RealtyScript 4.0.2 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create unauthorized user accounts and administra | Mar 16, 2026 | 8.8 | 27 | NO | NO |
CVE-2015-20118MEDIUM Next Click Ventures RealtyScript 4.0.2 contains a stored cross-site scripting vulnerability in the location_name parameter of the admin locations interface. Attackers can submit PO | Mar 16, 2026 | 6.1 | 22 | NO | NO |
CVE-2015-20115MEDIUM Next Click Ventures RealtyScript 4.0.2 fails to properly sanitize file uploads, allowing attackers to store malicious scripts through the file POST parameter in admin/tools.php. At | Mar 16, 2026 | 6.1 | 22 | NO | NO |
CVE-2015-20116MEDIUM Next Click Ventures RealtyScript 4.0.2 fails to properly sanitize CSV file uploads, allowing attackers to inject malicious scripts through filename parameters in multipart form dat | Mar 16, 2026 | 6.1 | 21 | NO | NO |
CVE-2015-20114MEDIUM Next Click Ventures RealtyScript 4.0.2 contains a cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by injecting malicious input th | Mar 16, 2026 | 6.1 | 21 | NO | NO |
CVE-2015-20119MEDIUM Next Click Ventures RealtyScript 4.0.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious HTML and iframe elements through | Mar 16, 2026 | 5.4 | 19 | NO | NO |
CVE-2015-20113MEDIUM Next Click Ventures RealtyScript 4.0.2 contains cross-site request forgery and persistent cross-site scripting vulnerabilities that allow attackers to perform administrative action | Mar 16, 2026 | 4.3 | 17 | NO | NO |
Signals from CVEs in this vendor scope (9 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Nextclickventures.
Media articles that mention a CVE ID that affects a product developed by Nextclickventures — matched by CVE ID, not by vendor name.