CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 7.7 via the 'cs_update_application_status_callback' due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Candidate-level access and above, to send a site-generated email with injected HTML to any user.
Explanation of Vulnerability in Simple Terms
WP JobHunt versions 7.7 and earlier contain an authorization flaw that allows authenticated users to modify data they should not have access to. The vulnerability requires a valid user account and network access but does not require user interaction. Integrity of site data can be compromised, though confidentiality and availability are not directly affected.
What an attacker can do
Modify data or settings in WP JobHunt that should be restricted to higher-privilege users.
Potential impact on your site
Authenticated users may alter job listings, settings, or other protected content without proper authorization.
Conditions required to exploit
Attacker must have a valid user account on the site with at least low-level privileges.
Key dates
External resources
Related vulnerabilities
