CVE-2023-37980

CVE-2023-37980 affects the Gravity Master Custom Field For WP Job Manager plugin (WordPress) up to version 1.1. It is an authenticated stored XSS vulnerability exploitable by an administrator (admin+) to inject script via the Custom Field for WP Job Manager. Root cause details in the sources indi...

CVE-2023-3328

CVE-2023-3328 affects the WordPress plugin Custom Field For WP Job Manager and is due to insufficient sanitization/escaping of certain settings in versions prior to 1.2. This allows Stored XSS by high-privilege users (e.g., admins) even when unfiltered_html is disallowed, including multisite setu...