Joomla iProperty Real Estate extension version 4.1.1 suffers from a cross site scripting vulnerability.