title: WP JobSearch < 1.7.4 - Authenticated Stored XSS
description: The WP JobSearch WordPress plugin before 1.7.4 did not sanitise or escape multiple of its parameters from the my-resume page before outputting them in the page, allowing low privilege users to use JavaScript payloads in them and leading to a Stored Cross-Site Scripting issue
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: WP JobSearch
vendor: Unknown
versions:
lessThan: 1.7.4, status: affected, version: 1.7.4, versionType: custom
}