Lucene search

K
wpvulndbEthicalhack3rWPVDB-ID:93C33963-E2ED-403E-9E26-5379CD50D849
HistoryAug 04, 2015 - 12:00 a.m.

Job Manager <= 0.7.22 - Unauthenticated Stored Cross-Site Scripting (XSS)

2015-08-0400:00:00
ethicalhack3r
wpscan.com
14

EPSS

0.002

Percentile

60.9%

The Job Manager WordPress plugin was affected by an Unauthenticated Stored Cross-Site Scripting (XSS) security vulnerability.

PoC

Go to the job listings page (/index.php/jobs/apply/), then click on “send through your résumé”, add the payload ('">) to the email field. The JavaScript will be executed on the admin job manager -> applications -> view details page.

EPSS

0.002

Percentile

60.9%

Related for WPVDB-ID:93C33963-E2ED-403E-9E26-5379CD50D849