A stored cross-site scripting (XSS) vulnerability exists in ResidenceCMS 2.10.1 that allows a low-privilege user to create malicious property content with HTML inside which acts as a stored XSS payload.
No PoCs from references.
- https://github.com/fkie-cad/nvd-json-data-feeds