PT-2025-5566 · WordPress · Wpjobboard

Name of the Vulnerable Software and Affected Versions: WPJobBoard versions 5.10.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Reflected Cross-site Scripting XSS. This means that an attacker can inject malicious...

WordPress plugin WPJobBoard 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site...

WordPress WPJobBoard plugin <= 5.10.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WPJobBoard versions = 5.10.1...

Jobeleon Theme < 1.9.2 - Reflected Cross-Site Scripting

Description The Jobeleon WPJobBoard theme for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 1.9.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

CVE-2022-47153

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPJobBoard Jobeleon Theme allows Reflected XSS.This issue affects Jobeleon Theme: from n/a through 1.9.1...

CVE-2022-47153

CVE-2022-47153 : Reflected Cross-Site Scripting in the WPJobBoard Jobeleon Theme (affected: Jobeleon Theme from n/a through 1.9.1) due to improper input neutralization during web page generation. Red Hat and Wordfence references corroborate the vulnerability and its cross‑site scripting nature bu...

WordPress WPJobBoard Plugin <= 5.9.0 is vulnerable to SQL Injection

Software WPJobBoard Type Plugin Vulnerable versions = 5.9.0 Fixed in 5.10.1 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-36525 Patch priority High CVSS severity High 8.6 Developer Claim ownership PSID 77c12f293782 Credits RE-ALTER Required privilege Unauthenticated Publish...

WPJobBoard < 5.7.0 - Unauthenticated SQL Injection

An Unauthenticated SQL Injection vulnerability was discovered in the WPJobBoard plugin v5.6.4 for WordPress. Vulnerable parameters: type, category. PoC $ :: Payloads Boolean-based blind: /advanced-search/?query=4325=4325=7 AND 2392=SELECT CASE WHEN 2392=2392 THEN 2392 ELSE SELECT 8365 UNION SELEC...

WPJobBoard < 5.7.0 - Unauthenticated Reflected XSS & XFS

Unauthenticated Reflected XSS & XFS vulnerabilities were discovered in the WPJobBoard plugin v5.6.4 for WordPress. Vulnerable parameters: query, location. Payloads: " " PoC Unauthenticated Reflected XSS:...

WPJobBoard < 5.7.0 - Unauthenticated SQL Injection

An Unauthenticated SQL Injection vulnerability was discovered in the WPJobBoard plugin v5.6.4 for WordPress. Vulnerable parameters: type, category. $ :: Payloads Boolean-based blind: /advanced-search/?query=4325&location=4325&type=7 AND 2392=SELECT CASE WHEN 2392=2392 THEN 2392 ELSE SELECT 8365...

WordPress WPJobBoard plugin <= 5.6.4 - Unauthenticated SQL Injection (SQLi) vulnerability

Unauthenticated SQL Injection SQLi vulnerability found by Ex.Mi in WordPress WPJobBoard plugin versions = 5.6.4. Solution Update the WordPress WPJobBoard plugin to the latest available version at least 5.7.0...

WordPress WPJobBoard plugin <= 5.6.4 - Unauthenticated Reflected Cross-Site Scripting (XSS) / Cross-Frame Scripting (XFS) vulnerabilities

Unauthenticated Reflected Cross-Site Scripting XSS and Cross-Frame Scripting XFS vulnerabilities found by Ex.Mi in WordPress WPJobBoard plugin versions = 5.6.4. Solution Update the WordPress WPJobBoard plugin to the latest available version at least 5.7.0...

WPJobBoard < 5.7.0 - Unauthenticated Reflected XSS & XFS

Unauthenticated Reflected XSS & XFS vulnerabilities were discovered in the WPJobBoard plugin v5.6.4 for WordPress. Vulnerable parameters: query, location. PoC Payloads: " " PoC Unauthenticated Reflected XSS:...

WPJobBoard < 5.6.0 - Unauthenticated Stored Cross-Site Scripting (XSS)

"An attacker can submit malicious javascript code persistent XSS on some fields of 'add job' form in frontend. Then, when an admin want to edit or delete this job in control page, the malicious payload will be executed." Edit WPScanTeam February 26th, 2020 - Vendor contacted via their page...

WPJobBoard Cross-Site Scripting Vulnerability

WPJobBoard is a WordPress job board plugin. A persistent cross-site scripting vulnerability exists in WPJobBoard 5.5.3. The vulnerability can be exploited to execute malicious code via the "Add Job" form...

WordPress WPJobBoard plugin <= 5.5.3 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

Unauthenticated Stored Cross-Site Scripting XSS vulnerability discovered by Mohamad Pishdar in WordPress WPJobBoard plugin versions = 5.5.3. Solution Update the WordPress WPJobBoard plugin to the latest available version at least 5.6.0...

CVE-2020-9019

The WPJobBoard plugin 5.5.3 for WordPress allows Persistent XSS via the Add Job form, as demonstrated by title and Description...

CVE-2020-9019

The WPJobBoard plugin 5.5.3 for WordPress allows Persistent XSS via the Add Job form, as demonstrated by title and Description...

Design/Logic Flaw

The WPJobBoard plugin 5.5.3 for WordPress allows Persistent XSS via the Add Job form, as demonstrated by title and Description...

CVE-2020-9019

CVE-2020-9019 concerns the WordPress WPJobBoard plugin version 5.5.3, which permits a persistent cross-site scripting (XSS) attack through the Add Job form in the frontend. The vulnerability targets fields like Title and Description, allowing injected script payloads to persist and potentially ex...