Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: nicejob Clear all filters
TI-2024-36406 CVE-2024-54318 · GHSA-j572-7jg9-f4xg

WordPress NiceJob plugin <= 3.6.5 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicejob NiceJob nicejob allows Stored XSS.This issue affects NiceJob: from n/a through <= 3.6.5.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0039 Published 2024-12-13 No fix listed CWE-79
TI-2024-10093 CVE-2024-10887 · GHSA-9fhr-g7hh-5ffq

NiceJob <= 3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 29

The NiceJob plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's shortcodes (nicejob-lead, nicejob-review, nicejob-engage, nicejob-badge, nicejob-stories) in all versions up to, a…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00459 Published 2024-11-13 No fix listed CWE-79
TI-2024-29614 CVE-2024-44025 · GHSA-r57q-8v2m-rm47

WordPress NiceJob plugin < 3.6.5 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicejob NiceJob nicejob allows Stored XSS.This issue affects NiceJob: from n/a through < 3.6.5.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00275 Published 2024-10-06 No fix listed CWE-79