70 matches found
CVE-2025-67916
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Astoundify Jobify jobify allows Reflected XSS.This issue affects Jobify: from n/a through = 4.3.0...
CVE-2025-67916
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Astoundify Jobify jobify allows Reflected XSS.This issue affects Jobify: from n/a through = 4.3.0...
CVE-2025-67916
CVE-2025-67916 affects the WordPress Theme Jobify (Job Board) up to version 4.3.0. The issue is a Reflected XSS vulnerability caused by improper input handling during web page generation. Impact per sources: potential script execution in a user’s browser. Mitigation: patch deployed in Jobify 4.3....
CVE-2025-67916 WordPress Jobify theme <= 4.3.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Astoundify Jobify jobify allows Reflected XSS.This issue affects Jobify: from n/a through = 4.3.0...
CVE-2025-67916 WordPress Jobify theme <= 4.3.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Astoundify Jobify jobify allows Reflected XSS.This issue affects Jobify: from n/a through = 4.3.0...
WordPress plugin Jobify 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
PT-2026-1893
Name of the Vulnerable Software and Affected Versions Astoundify Jobify versions through 4.3.0 Description The software contains a flaw related to improper input handling during web page generation, specifically a Reflected Cross-site Scripting XSS issue. This allows for the injection of maliciou...
WordPress Jobify theme <= 4.3.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Jobify versions = 4.3.0...
WordPress Jobify theme <= 4.2.7 - Missing Authorization to Unauthenticated Server-Side Request Forgery, Arbitrary Image Upload, and Image Generation vulnerability
Missing Authorization to Unauthenticated Server-Side Request Forgery, Arbitrary Image Upload, and Image Generation vulnerability discovered by Lucio Sá in WordPress Theme Jobify versions = 4.2.7...
EUVD-2024-46085
Malicious code in bioql PyPI...
EUVD-2024-51722
Malicious code in bioql PyPI...
EUVD-2025-27658
Malicious code in bioql PyPI...
EUVD-2024-46049
Malicious code in bioql PyPI...
EUVD-2024-46059
Malicious code in bioql PyPI...
EUVD-2024-46136
Malicious code in bioql PyPI...
CVE-2025-8318
The Jobify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘keyword’ parameter in all versions up to, and including, 1.4.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...
CVE-2025-8318 Jobify <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via keyword Parameter
The Jobify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘keyword’ parameter in all versions up to, and including, 1.4.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...
CVE-2025-8318 Jobify <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via keyword Parameter
The Jobify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘keyword’ parameter in all versions up to, and including, 1.4.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...
CVE-2025-8318
CVE-2025-8318 affects the WordPress Jobify plugin (versions
WordPress Jobify plugin <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via keyword Parameter vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via keyword Parameter vulnerability discovered by Muhammad Yudha - DJ in WordPress Theme Jobify versions = 1.4.4...