CVE-2025-0961: code-projects Job Recruitment load_job-details.php cross site scripting
A vulnerability, which was classified as problematic, has been found in code-projects Job Recruitment 1.0. Affected by this issue is some unknown functionality of the file /parse/loadjob-details.php. The manipulation of the argument businessstreamname/companywebsiteurl leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0961?
CVE-2025-0961 is classified as a problematic vulnerability.
How does CVE-2025-0961 affect Job Recruitment version 1.0?
CVE-2025-0961 affects the functionality of the file /_parse/load_job-details.php, where manipulation of the argument business_stream_name can lead to cross-site scripting.
What is the impact of exploiting CVE-2025-0961?
Exploiting CVE-2025-0961 can result in unauthorized script execution in the context of users, potentially leading to data theft or session hijacking.
How can I mitigate the risks associated with CVE-2025-0961?
To mitigate the risks of CVE-2025-0961, validate and sanitize all input to the /_parse/load_job-details.php file to prevent injection attacks.
Is CVE-2025-0961 present in other versions of Job Recruitment?
CVE-2025-0961 is specifically noted for Job Recruitment version 1.0 and does not mention other versions in its description.