Cross-site Scripting Vulnerability in Jobs for WordPress by BlueGlass Interactive AG
CVE-2025-68597

Currently unrated

Key Information:

Vendor

WordPress

Vendor
CVE Published:
24 December 2025

What is CVE-2025-68597?

A Cross-site Scripting (XSS) vulnerability exists in the Jobs for WordPress plugin developed by BlueGlass Interactive AG, stemming from improper neutralization of user input during web page generation. This flaw allows malicious actors to inject and execute arbitrary scripts in the context of the user's browser, potentially leading to unauthorized data exposure or interaction. The issue affects versions from n/a up to and including 2.7.17, making it crucial for users to upgrade to secure their sites against possible attacks.

Affected Version(s)

Jobs for WordPress <= n/a

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Muhammad Yudha - DJ | Patchstack Bug Bounty Program
.
CVE-2025-68597 : Cross-site Scripting Vulnerability in Jobs for WordPress by BlueGlass Interactive AG