| Название | code-projects job-recruitment v1.0 php Cross Site Scripting |
|---|
| Описание | echo $job_type parameter in _call_job_search_ajax.php , There is a cross-site scripting attack vulnerability in Job-recruitment system. The parameter that can be controlled is: $sch . A malicious attacker can obtain sensitive information about administrators.
|
|---|
| Источник | ⚠️ https://github.com/1337g/CVE-2025-X/blob/main/xss-1_27.md |
|---|
| Пользователь | 1337gu (UID 80869) |
|---|
| Представление | 27.01.2025 15:05 (1 Год назад) |
|---|
| Модерация | 28.01.2025 10:24 (19 hours later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 293903 [code-projects Job Recruitment 1.0 _call_job_search_ajax.php job_type межсайтовый скриптинг] |
|---|
| Баллы | 18 |
|---|