Stored Cross-Site Scripting Vulnerability in JobCareer Theme by WordPress
CVE-2019-15869

5.4MEDIUM

Key Information:

Vendor

Wordpress
Status
Jobcareer
Vendor
CVE Published:
3 September 2019

What is CVE-2019-15869?

The JobCareer theme for WordPress prior to version 2.5.1 is susceptible to stored cross-site scripting (XSS). This vulnerability allows attackers to inject malicious scripts into the website, which can then be executed within the context of users visiting the affected site. If exploited, this could lead to unauthorized actions being performed on behalf of users or unauthorized access to sensitive information.

References

https://wpvulndb.com/vulnerabilities/9322
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.