NiceJob vulnerable to Cross-Site Request Forgery (CSRF) and Stored Cross-Site Scripting (XSS)

CVE-2024-44028

What is CVE-2024-44028?

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Nicejob Plugin for WordPress. This vulnerability can allow malicious actors to execute unintended actions on behalf of authenticated users. Specifically, it could facilitate Stored Cross-Site Scripting (XSS), where harmful scripts are injected and stored within the application. This flaw predominantly affects versions earlier than 3.6.5, posing risks to data integrity and user safety. Site administrators are encouraged to update to the latest version to mitigate any potential threats.

References