Non notée
CVE-2021-24421 The WP JobSearch WordPress plugin before 1.7.4 did not sanitise or escape multiple of its parameters from the…
Description
The WP JobSearch WordPress plugin before 1.7.4 did not sanitise or escape multiple of its parameters from the my-resume page before outputting them in the page, allowing low privilege users to use JavaScript payloads in them and leading to a Stored Cross-Site Scripting issue
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP JobSearch 1.7 | premières → < 1.7.4 | 1.7.4 |
Autres CVE de WP JobSearch
Les 4 CVE de WP JobSearch →
CVE-2023-6584
The WP JobSearch WordPress plugin before 2.3.4 does not prevent attackers from logging-in as any users with the only…
7.5
Élevée
CVE-2023-6585
The WP JobSearch WordPress plugin before 2.3.4 does not validate files to be uploaded, which could allow unauthenticated…
7.5
Élevée
CVE-2022-1168
There is a Cross-Site Scripting vulnerability in the JobSearch WP JobSearch WordPress plugin before 1.5.1
Non notée