{ "id": "CVE-2024-0820", "sourceIdentifier": "contact@wpscan.com", "published": "2024-03-18T19:15:06.487", "lastModified": "2024-03-18T19:40:00.173", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "The Jobs for WordPress plugin before 2.7.4 does not sanitise and escape some parameters, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks" }, { "lang": "es", "value": "El complemento Jobs for WordPress anterior a 2.7.4 no sanitiza ni escapa a algunos par\u00e1metros, lo que podr\u00eda permitir a los usuarios con un rol tan bajo como colaborador realizar ataques de Cross-Site Scripting Almacenado." } ], "metrics": {}, "references": [ { "url": "https://wpscan.com/vulnerability/fc091bbd-7338-4bd4-add5-e46502a9a949/", "source": "contact@wpscan.com" } ] }