3 matches found
CVE-2021-39328
The Simple Job Board WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $jobboardprivacypolicylabel variable echo'd out via the /admin/settings/class-simple-job-board-settings-privacy.php file which allowed attackers with administrative user access t...
PT-2021-22535
Name of the Vulnerable Software and Affected Versions: The Simple Job Board WordPress plugin versions up to and including 2.9.4 Description: The issue is related to Stored Cross-Site Scripting due to insufficient escaping on the job board privacy policy label variable. This variable is echo'd out...
CVE-2021-39328: Improper Neutralization of Input During Web Page Generation
The Simple Job Board WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $jobboardprivacypolicylabel variable echo'd out via the /admin/settings/class-simple-job-board-settings-privacy.php file which allowed attackers with administrative user access t...