← back
CVE-2022-1168CWE-79

JobSearch < 1.5.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)

18Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 1.8%
exploitation probability
1.8%top 23% of all CVEs
observed exploitation
nono source reports it
There is a Cross-Site Scripting vulnerability in the JobSearch WP JobSearch WordPress plugin before 1.5.1.
Affected products
Unknown · WP JobSearch