CVE-2024-10104: Jobs for WordPress < 2.7.8 - Contributor+ Stored XSS
Published Nov 15, 2024
·Updated
The Jobs for WordPress plugin before 2.7.8 does not sanitise and escape some of its Job settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks
Affected Software
1 affected component
WordPress Jobs for WordPress<2.7.8
Event History
Nov 15, 2024
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
DescriptionWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2024-10104?
CVE-2024-10104 is considered a high severity vulnerability due to its potential for Stored Cross-Site Scripting attacks.
2
How do I fix CVE-2024-10104?
To fix CVE-2024-10104, update the Jobs for WordPress plugin to version 2.7.8 or higher.
3
Who is affected by CVE-2024-10104?
CVE-2024-10104 affects users of the Jobs for WordPress plugin versions prior to 2.7.8.
4
What type of attack can CVE-2024-10104 facilitate?
CVE-2024-10104 can facilitate Stored Cross-Site Scripting attacks, allowing high privilege users to inject malicious scripts.
5
What specific component of the Jobs for WordPress plugin is vulnerable in CVE-2024-10104?
The vulnerability in CVE-2024-10104 exists because the plugin does not adequately sanitize and escape certain Job settings.