CVE-2024-43997: WordPress easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg plugin <= 2.4.14 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in easy.Jobs EasyJobs allows Reflected XSS.This issue affects EasyJobs: from n/a through 2.4.14.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43997?
CVE-2024-43997 has a medium severity rating due to its potential for reflected cross-site scripting (XSS) attacks.
How do I fix CVE-2024-43997?
To fix CVE-2024-43997, update EasyJobs to version 2.4.15 or later to mitigate the reflected XSS vulnerability.
What types of attacks can CVE-2024-43997 facilitate?
CVE-2024-43997 can facilitate reflected XSS attacks, allowing an attacker to execute scripts in the context of the user's browser.
Which versions of EasyJobs are affected by CVE-2024-43997?
All versions of EasyJobs from launch until version 2.4.14 are affected by CVE-2024-43997.
Is CVE-2024-43997 related to specific functionalities in EasyJobs?
Yes, CVE-2024-43997 is related to improper neutralization of input during web page generation in EasyJobs.