CVE-2024-0820: Jobs for WordPress < 2.7.4 - Contributor+ Stored XSS
Published Mar 18, 2024
·Updated
The Jobs for WordPress plugin before 2.7.4 does not sanitise and escape some parameters, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks
Affected Software
2 affected components
WordPress Jobs for WordPress<2.7.4
BlueGlass Jobs For Wordpress Wordpress<2.7.4
Event History
Mar 18, 2024
CVE Published
via MITRE·07:05 PM
Data Sourced
via MITRE·07:05 PM
DescriptionWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-0820?
CVE-2024-0820 has a medium severity rating due to its potential for Stored Cross-Site Scripting attacks.
2
How do I fix CVE-2024-0820?
To fix CVE-2024-0820, update the Jobs for WordPress plugin to version 2.7.4 or later.
3
Who is affected by CVE-2024-0820?
Users with WordPress installations running the Jobs for WordPress plugin versions prior to 2.7.4 are affected by CVE-2024-0820.
4
What vulnerabilities are associated with CVE-2024-0820?
CVE-2024-0820 allows users with contributor roles to execute Stored Cross-Site Scripting attacks.
5
Are any versions of the Jobs for WordPress plugin safe from CVE-2024-0820?
Yes, versions 2.7.4 and above of the Jobs for WordPress plugin are safe from the vulnerabilities associated with CVE-2024-0820.