This vulnerability in code-projects Online Job Portal 1.0 allows an attacker to perform cross-site scripting via manipulation of an unknown function in the /Admin/DetailJob.php file. The attack vector is network-based with low attack complexity and no privileges required, but user interaction is needed. The vulnerability does not provide confidentiality, integrity, or availability impacts beyond the XSS effect. The vulnerability is publicly disclosed but no official patch or remediation guidance is currently available.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected application, potentially leading to session hijacking or other client-side impacts. However, the impact is limited to the scope of the XSS vulnerability, with no direct impact on confidentiality, integrity, or availability of the system as per the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor vendor communications for updates. In the meantime, applying input validation and output encoding on the affected endpoint may mitigate exploitation risks.