CVE-2024-7761: Simple Job Board < 2.12.2 - Admin+ Stored XSS
Published May 15, 2025
·Updated
In the process of testing the Simple Job Board WordPress plugin before 2.12.2, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor
Affected Software
2 affected components
Simple Job Board WordPress plugin<2.12.2
PressTigers Simple Job Board Wordpress<2.12.2
Event History
May 15, 2025
CVE Published
via MITRE·08:07 PM
Data Sourced
via MITRE·08:07 PM
DescriptionWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-7761?
CVE-2024-7761 has a high severity due to the risk of account takeover and stored XSS vulnerabilities.
2
How do I fix CVE-2024-7761?
To fix CVE-2024-7761, update the Simple Job Board WordPress plugin to version 2.12.2 or later.
3
What types of attacks can CVE-2024-7761 enable?
CVE-2024-7761 can enable stored XSS attacks and potentially allow for account takeover.
4
Who is affected by CVE-2024-7761?
Anyone using the Simple Job Board WordPress plugin versions prior to 2.12.2 is affected by CVE-2024-7761.
5
What is the impact of CVE-2024-7761?
The impact of CVE-2024-7761 includes the possibility of executing malicious scripts and compromising user accounts.