Threats tagged 'ghsa-wfm8-84j7-5644'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.2	CVE-2026-112365The easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution plugin for WordPress is High7.22026-10-30GCVE DatabaseCVE-2026-112365 The easy.jobs WordPress plugin up to version 2.8.4 is vulnerable to stored cross-site scripting (XSS) via the 'cover_letter' parameter. This vulnerability allows unauthenticated attackers to inject malicious scripts that execute when an administrator views the affected candidate's Application tab and clicks a crafted link. The issue arises from insufficient input sanitization and output escaping, enabling exploitation through WHATWG URL parsing to execute JavaScript payloads. Report on CVE-2026-112365 Vulnerability CWE-79 #ghsa-wfm8-84j7-5644	GCVE Database	2026-10-30

Page 1 of 1