CVE-2021-24421

The WP JobSearch WordPress plugin before 1.7.4 did not sanitise or escape multiple of its parameters from the my-resume page before outputting them in the page, allowing low privilege users to use JavaScript payloads in them and leading to a Stored Cross-Site Scripting issue...

CVE-2021-24421

creationtimestamp| type| source ---|---|--- 2021-07-13 00:18:15+00:00| seen| https://t.me/cibsecurity/26081...

CVE-2021-24421 WP JobSearch < 1.7.4 - Authenticated Stored XSS

The WP JobSearch WordPress plugin before 1.7.4 did not sanitise or escape multiple of its parameters from the my-resume page before outputting them in the page, allowing low privilege users to use JavaScript payloads in them and leading to a Stored Cross-Site Scripting issue...

CVE-2021-24421

The WP JobSearch WordPress plugin (versions before 1.7.4) is vulnerable to an authenticated stored XSS on the my-resume page because multiple parameters are not sanitized/escaped before output. This allows an attacker with low privileges (authenticated user) to inject JavaScript payloads via fiel...