CVE-2024-0820

2024-03-1819:15:06

[email protected]

web.nvd.nist.gov

wordpress

plugin

cve

security

xss

nvd

vulnerability

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%

JSON

The Jobs for WordPress plugin before 2.7.4 does not sanitise and escape some parameters, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks

VendorProductVersionCPE
blueglassjobs_for_wordpress*cpe:2.3:a:blueglass:jobs_for_wordpress:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
blueglass	jobs_for_wordpress	*	cpe:2.3:a:blueglass:jobs_for_wordpress::::::::

References

wpscan.com/vulnerability/fc091bbd-7338-4bd4-add5-e46502a9a949/