CVE-2017-14751
MEDIUM
6.1
CVSS 3.0
Description
The Intense WP "WP Jobs" plugin 1.5 for WordPress has XSS, related to the Job Qualification field.
Affected WordPress components
-
WP Jobs Plugin · wp-jobsVersions not specifiedView on WordPress.org
A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.
Affected products and versions
- n/a n/a — Versions not specified
- intensewp wp_jobs — Version 1.0
- intensewp wp_jobs — Version 1.1
- intensewp wp_jobs — Version 1.2
- intensewp wp_jobs — Version 1.3
- intensewp wp_jobs — Version 1.4
- intensewp wp_jobs — Version 1.5
References
- bbs.microdesktop.com http://bbs.microdesktop.com/2017/09/25/wordpress-4-8-wp-jobs-1-5-job-qualification-edit-box-xss/ Third Party Advisory
- www.securityfocus.com http://www.securityfocus.com/bid/101030 Third Party Advisory, VDB Entry
- wordpress.org https://wordpress.org/plugins/wp-jobs/#developers Release Notes, Third Party Advisory
- nvd.nist.gov Official NVD record