Vulnerabilities > CVE-2021-24421 - Unspecified vulnerability in Eyecix Jobsearch WP JOB Board

047910
CVSS 5.4 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
eyecix
NVD
Published: 2021-07-12
Updated: 2024-11-21

Summary

The WP JobSearch WordPress plugin before 1.7.4 did not sanitise or escape multiple of its parameters from the my-resume page before outputting them in the page, allowing low privilege users to use JavaScript payloads in them and leading to a Stored Cross-Site Scripting issue

Vulnerable Configurations

Part Description Count
Application
Eyecix
11

References