CVE-2024-32149: WordPress Jobs for WordPress plugin <= 2.7.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BlueGlass Jobs for WordPress allows Reflected XSS.This issue affects Jobs for WordPress: from n/a through 2.7.5.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-32149?
CVE-2024-32149 has been classified as a medium severity vulnerability due to its potential to enable reflected cross-site scripting (XSS) attacks.
How do I fix CVE-2024-32149?
To fix CVE-2024-32149, upgrade BlueGlass Jobs for WordPress to version 2.7.6 or later.
Who is affected by CVE-2024-32149?
CVE-2024-32149 affects all versions of BlueGlass Jobs for WordPress from n/a up to 2.7.5.
What type of attack does CVE-2024-32149 allow?
CVE-2024-32149 allows reflected XSS attacks which can lead to unauthorized script execution in the user's browser.
How can CVE-2024-32149 be exploited?
CVE-2024-32149 can be exploited by an attacker crafting a malicious URL that, when visited by a victim, executes unwanted scripts in their browser.