Next Click Ventures RealtyScript 4.0.2 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary code within the administrative interface, posing a significant risk of account takeover.

The application fails to properly sanitize user input provided via the file POST parameter in the admin/tools.php script. This flaw allows an authenticated user to store malicious JavaScript, which subsequently executes in the browser of any other user, including administrators, who accesses the affected page.

Successful exploitation of this vulnerability can lead to unauthorized administrative actions, including the potential for full site compromise or session hijacking of privileged accounts. Given the CVSS score of 7.2, the vulnerability represents a high risk to organizational integrity, as it facilitates unauthorized control over the web application platform and the data managed therein.

Immediate Action: Since no official patch is currently identified, administrators should restrict access to administrative interfaces to trusted networks and audit all user-uploaded files for malicious content. Users should consider migrating to a more secure or actively maintained platform.

Proactive Monitoring: Security teams should monitor web server access logs for anomalous POST requests to admin/tools.php and review administrative activity logs for unauthorized changes or new user account creation.

Compensating Controls: Deploy a Web Application Firewall (WAF) configured to block malicious script injection patterns and validate file upload types to prevent the storage of non-authorized file formats.

Public Exploit Available: Yes, a published proof-of-concept exists, as documented in the Exploit Database (EDB-ID 38496).

The vulnerability in RealtyScript 4.0.2 is severe due to its potential for administrative account compromise via persistent XSS. Organizations currently running this version must prioritize the implementation of compensating controls, such as WAF filtering and strict network access control, to mitigate the risk of exploitation. Given the lack of a vendor-provided patch, decommissioning or upgrading the software is the only definitive method to eliminate this security exposure.