VYPR
Unrated severityNVD Advisory· Published Mar 18, 2024· Updated Mar 28, 2025

Jobs for WordPress < 2.7.4 - Contributor+ Stored XSS

CVE-2024-0820

Description

The Jobs for WordPress plugin before 2.7.4 does not sanitise and escape some parameters, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.