CVE-2023-26017: WordPress Jobs for WordPress Plugin <= 2.5.10.2 is vulnerable to Cross Site Scripting (XSS)
Published May 3, 2023
·Updated
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in BlueGlass Jobs for WordPress plugin <= 2.5.10.2 versions.
Affected Software
1 affected component
BlueGlass Jobs For Wordpress Wordpress<2.5.11
Remediation
Information
Update to 2.5.11 or a higher version.
Event History
May 3, 2023
CVE Published
via MITRE·03:24 PM
Data Sourced
via MITRE·03:24 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-26017?
CVE-2023-26017 has a high severity rating due to its potential for stored cross-site scripting (XSS) attacks.
2
How do I fix CVE-2023-26017?
To resolve CVE-2023-26017, update the BlueGlass Jobs for WordPress plugin to version 2.5.11 or higher.
3
What is the impact of CVE-2023-26017?
CVE-2023-26017 allows authenticated users with administrative privileges to inject malicious scripts, affecting website security.
4
Which versions of BlueGlass Jobs for WordPress are affected by CVE-2023-26017?
CVE-2023-26017 affects BlueGlass Jobs for WordPress plugin versions 2.5.10.2 and earlier.
5
Who can exploit CVE-2023-26017?
CVE-2023-26017 can be exploited by authenticated users with administrator roles in the affected WordPress plugin.