This vulnerability affects CodeAstro Online Job Portal 1.0 and arises from improper access control checks in the Delete Job Posting Handler (/jobs/job-delete.php). By manipulating the ID parameter, an attacker with low privileges can remotely trigger unauthorized deletion of job postings. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity. No vendor advisory or patch information is currently available, and the exploit code is publicly accessible.

Successful exploitation could allow an attacker to delete job postings without proper authorization, potentially disrupting the integrity and availability of job listings on the portal. The vulnerability requires low privileges and no user interaction, increasing the risk of remote exploitation. However, there is no evidence of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the job deletion functionality to trusted users only and monitor for unauthorized deletion attempts. Avoid exposing the vulnerable endpoint publicly if possible.