CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
What the vulnerability does
Cross-Site Request Forgery (CSRF), Deserialization of Untrusted Data vulnerability in ThemeHigh Job Manager & Career – Manage job board listings, and recruitments.This issue affects Job Manager & Career – Manage job board listings, and recruitments: from n/a through 1.4.4.
Explanation of Vulnerability in Simple Terms
Job Manager & Career versions up to 1.4.4 contain a cross-site request forgery (CSRF) vulnerability that allows attackers to perform unauthorized actions on behalf of site visitors. An attacker can craft a malicious link or page that, when visited by a logged-in user, executes unwanted operations such as creating, modifying, or deleting job listings. The vulnerability affects all users and can compromise job board integrity and data.
What an attacker can do
Perform unauthorized actions (create, modify, or delete job listings) on behalf of a logged-in site visitor.
Potential impact on your site
Job listings can be created, modified, or deleted without authorization; site reputation and data integrity at risk.
Conditions required to exploit
A site visitor must click a malicious link or visit an attacker-controlled page while logged into the site.
Key dates
External resources
Related vulnerabilities
