1 matches found
CVE-2021-39328: Improper Neutralization of Input During Web Page Generation
The Simple Job Board WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $jobboardprivacypolicylabel variable echo'd out via the /admin/settings/class-simple-job-board-settings-privacy.php file which allowed attackers with administrative user access t...
5.5CVSS5.7AI score0.00915EPSS
SaveExploits1References2
20