CVE-2025-24781

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound WPJobBoard allows Reflected XSS. This issue affects WPJobBoard: from n/a through 5.10.1...

CVE-2022-47153

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPJobBoard Jobeleon Theme allows Reflected XSS.This issue affects Jobeleon Theme: from n/a through 1.9.1...

CVE-2025-24781

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound WPJobBoard allows Reflected XSS. This issue affects WPJobBoard: from n/a through 5.10.1...

CVE-2025-24781 WordPress WPJobBoard plugin <= 5.10.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound WPJobBoard allows Reflected XSS. This issue affects WPJobBoard: from n/a through 5.10.1...

CVE-2025-24781

CVE-2025-24781 describes a Reflected XSS in the WordPress WPJobBoard plugin. Affected software: WP Job Board

PT-2025-5566 · WordPress · Wpjobboard

Name of the Vulnerable Software and Affected Versions: WPJobBoard versions 5.10.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Reflected Cross-site Scripting XSS. This means that an attacker can inject malicious...

WordPress plugin WPJobBoard 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site...

CVE-2025-24781: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound WPJobBoard allows Reflected XSS. This issue affects WPJobBoard: from n/a through 5.10.1...

WordPress WPJobBoard plugin <= 5.10.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WPJobBoard versions = 5.10.1...

Jobeleon Theme < 1.9.2 - Reflected Cross-Site Scripting

Description The Jobeleon WPJobBoard theme for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 1.9.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

CVE-2022-47153

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPJobBoard Jobeleon Theme allows Reflected XSS.This issue affects Jobeleon Theme: from n/a through 1.9.1...

CVE-2022-47153

CVE-2022-47153 : Reflected Cross-Site Scripting in the WPJobBoard Jobeleon Theme (affected: Jobeleon Theme from n/a through 1.9.1) due to improper input neutralization during web page generation. Red Hat and Wordfence references corroborate the vulnerability and its cross‑site scripting nature bu...

WordPress WPJobBoard Plugin <= 5.9.0 is vulnerable to SQL Injection

Software WPJobBoard Type Plugin Vulnerable versions = 5.9.0 Fixed in 5.10.1 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-36525 Patch priority High CVSS severity High 8.6 Developer Claim ownership PSID 77c12f293782 Credits RE-ALTER Required privilege Unauthenticated Publish...

WPJobBoard < 5.7.0 - Unauthenticated Reflected XSS & XFS

Unauthenticated Reflected XSS & XFS vulnerabilities were discovered in the WPJobBoard plugin v5.6.4 for WordPress. Vulnerable parameters: query, location. PoC Payloads: " " PoC Unauthenticated Reflected XSS:...

WPJobBoard < 5.7.0 - Unauthenticated Reflected XSS & XFS

Unauthenticated Reflected XSS & XFS vulnerabilities were discovered in the WPJobBoard plugin v5.6.4 for WordPress. Vulnerable parameters: query, location. Payloads: " " PoC Unauthenticated Reflected XSS:...

WPJobBoard < 5.7.0 - Unauthenticated SQL Injection

An Unauthenticated SQL Injection vulnerability was discovered in the WPJobBoard plugin v5.6.4 for WordPress. Vulnerable parameters: type, category. PoC $ :: Payloads Boolean-based blind: /advanced-search/?query=4325=4325=7 AND 2392=SELECT CASE WHEN 2392=2392 THEN 2392 ELSE SELECT 8365 UNION SELEC...

WPJobBoard < 5.7.0 - Unauthenticated SQL Injection

An Unauthenticated SQL Injection vulnerability was discovered in the WPJobBoard plugin v5.6.4 for WordPress. Vulnerable parameters: type, category. $ :: Payloads Boolean-based blind: /advanced-search/?query=4325&location=4325&type=7 AND 2392=SELECT CASE WHEN 2392=2392 THEN 2392 ELSE SELECT 8365...

WordPress WPJobBoard plugin <= 5.6.4 - Unauthenticated SQL Injection (SQLi) vulnerability

Unauthenticated SQL Injection SQLi vulnerability found by Ex.Mi in WordPress WPJobBoard plugin versions = 5.6.4. Solution Update the WordPress WPJobBoard plugin to the latest available version at least 5.7.0...

WordPress WPJobBoard plugin <= 5.6.4 - Unauthenticated Reflected Cross-Site Scripting (XSS) / Cross-Frame Scripting (XFS) vulnerabilities

Unauthenticated Reflected Cross-Site Scripting XSS and Cross-Frame Scripting XFS vulnerabilities found by Ex.Mi in WordPress WPJobBoard plugin versions = 5.6.4. Solution Update the WordPress WPJobBoard plugin to the latest available version at least 5.7.0...

WPJobBoard < 5.6.0 - Unauthenticated Stored Cross-Site Scripting (XSS)

"An attacker can submit malicious javascript code persistent XSS on some fields of 'add job' form in frontend. Then, when an admin want to edit or delete this job in control page, the malicious payload will be executed." Edit WPScanTeam February 26th, 2020 - Vendor contacted via their page...