CVE-2025-14467:詳細資料

CVE-2025-14467

4.4
/
中危
0.03%V4
2025-12-12
03h20 +00:00
Cross-site Scripting
A03-Injection
Network
2026-04-08
16h35 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

WP Job Portal <= 2.4.4 - Authenticated (Editor+) Stored Cross-Site Scripting via Job Description Field

The WP Job Portal plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.4.4. This is due to the plugin explicitly whitelisting the `

參考資料