CVE-2024-44028

Cross-Site Request Forgery CSRF vulnerability in nicejob NiceJob nicejob allows Stored XSS.This issue affects NiceJob: from n/a through 3.6.5...

CVE-2024-44028 WordPress NiceJob plugin < 3.6.5 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in nicejob NiceJob nicejob allows Stored XSS.This issue affects NiceJob: from n/a through 3.6.5...

CVE-2024-44028

CVE-2024-44028 affects the WordPress NiceJob plugin (NiceJob) prior to 3.6.5. It combines a CSRF flaw with a Stored XSS vulnerability, enabling stored cross-site scripting through unauthenticated CSRF actions. Affected versions:

WordPress NiceJob Plugin < 3.6.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software NiceJob Type Plugin Vulnerable versions 3.6.5 Fixed in 3.6.5 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-44028 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ba7b34b9da8d Credits SOPROBRO Required...