Flexmls® IDX vulnerabilities

2 known vulnerabilities in Flexmls® IDX from Flexmls. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Flexmls® IDX: Improper Neutralization of Input During Web Page Generation

  CVE-2026-25369Mar 16, 2026Flexmls

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in flexmls Flexmls® IDX flexmls-idx allows Reflected XSS.This issue affects Flexmls® IDX: from n/a through <= 3.15.9.

• 9.8 Critical severity

  Flexmls® IDX: Deserialization of Untrusted Data

  CVE-2025-26900Feb 25, 2025Flexmls

  Deserialization of Untrusted Data vulnerability in flexmls Flexmls® IDX flexmls-idx allows Object Injection.This issue affects Flexmls® IDX: from n/a through <= 3.14.27.