CVE-2023-3344

The Auto Location for WP Job Manager via Google WordPress plugin before 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in...

CVE-2023-3344

The Auto Location for WP Job Manager via Google WordPress plugin before 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in...

CVE-2023-3344

The CVE-2023-3344 entry concerns the WordPress plugin Auto Location for WP Job Manager via Google, prior to version 1.1. It stems from insufficient sanitisation/escaping of certain plugin settings, enabling Stored Cross-Site Scripting by high-privilege users (e.g., admins), including scenarios wh...

CVE-2023-3344 Auto Location for WP Job Manager via Google < 1.1 - Admin+ Cross Site Scripting

The Auto Location for WP Job Manager via Google WordPress plugin before 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in...

WordPress Auto Location for WP Job Manager via Google Plugin < 1.1 is vulnerable to Cross Site Scripting (XSS)

Software Auto Location for WP Job Manager via Google Type Plugin Vulnerable versions 1.1 Fixed in 1.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-3344 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 2c713955c43e Credits Bo...