Job Board Vanila Plugin <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
mediumThe Job Board Vanila WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via the psjb_exp_in and the psjb_curr_in parameters found in the ~/job-settings.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in ve...
- CVSS:
- 5.5
- Affected:
- 1.0 – 1.0
- Fix:
- No patched version reported
- Disclosed:
- Oct 14, 2021