32 matches found
CVE-2019-15869
The JobCareer theme before 2.5.1 for WordPress has stored XSS...
CVE-2019-15869
The JobCareer theme before 2.5.1 for WordPress has stored XSS...
Cross site scripting
The JobCareer theme before 2.5.1 for WordPress has stored XSS...
CVE-2019-15869
The JobCareer theme before 2.5.1 for WordPress has stored XSS...
CVE-2019-15869
The CVE-2019-15869 entries confirm a stored XSS vulnerability in the WordPress JobCareer theme prior to version 2.5.1. The issue is described as an authentication-relevant, stored cross-site scripting flaw affecting input fields (notably in resume/profile areas) where bad input filtering allows a...
WordPress JobCareer theme cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.JobCareer theme is a plugin used in one of the job board themes. A cross-site scripting vulnerability exists in WordPress JobCareer the...
WordPress JobCareer theme - 2.5 - Stored Cross-Site Scripting (XSS) vulnerability
Stored Cross-Site Scripting XSS vulnerability found by QUIXSS in WordPress JobCareer theme version 2.5. Solution Update the WordPress JobCareer theme to the latest available version at least 2.5.1...
JobCareer < 2.5.1 - Authenticated Stored Cross-Site Scripting
Bad input fields data filtering has been discovered in the 'JobCareer | Job Board Responsive WordPress Theme'. PoC http://jobcareer.chimpgroup.com/candidate/asdasdasdasdasd/ Register a new account on the demo website: http://jobcareer.chimpgroup.com/ , then go to the «Resume» profile tab:...
JobCareer < 2.5.1 - Authenticated Stored Cross-Site Scripting
Bad input fields data filtering has been discovered in the 'JobCareer | Job Board Responsive WordPress Theme'. http://jobcareer.chimpgroup.com/candidate/asdasdasdasdasd/ Register a new account on the demo website: http://jobcareer.chimpgroup.com/ , then go to the «Resume» profile tab:...
WordPress JobCareer premium theme <= 2.4 - User enumeration & Password Reset vulnerabilities
User enumeration & Password Reset vulnerabilities found by Anthony MAESTRE in WordPress JobCareer premium theme versions = 2.4. Solution Update the WordPress JobCareer premium theme to the latest available version at least 2.4.1...
JobCareer < 2.4.1 - User enumeration & Reset password
The theme used a vulnerable version of the WP-jobhunt plugin affected by the issues below: CVE-2018-19487: The WP-jobhunt plugin before version 2.4 for WordPress does not control AJAX requests sent to the csemployerajaxprofile function through the admin-ajax.php file, which allows remote...
penza.jobcareer.ru XSS vulnerability
Vulnerable URL: http://penza.jobcareer.ru/jobs/scriptalert-openbugbountyscript/?feed=\n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:|...