5.9
Medium
CVE-2024-10104 The Jobs for WordPress plugin before 2.7.8 does not sanitise and escape some of its Job settings, which could allow high…
Description
The Jobs for WordPress plugin before 2.7.8 does not sanitise and escape some of its Job settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jobs for WordPress 2.7 | earliest → < 2.7.8 | 2.7.8 |