Skip to content
OpenAdvisories
Unscored CVE-2022-1167 EUVD-2022-24509GHSA-rq6x-9xq3-jm42

CareerUp < 2.3.1 - Unauthenticated Reflected Cross-Site Scripting

Published Apr 4, 2022 · Updated Aug 2, 2024 · Assigned by WPScan

Description

There are unauthenticated reflected Cross-Site Scripting (XSS) vulnerabilities in CareerUp Careerup WordPress theme before 2.3.1, via the filter parameters.

Affected products

VendorProductAffectedFixed
— Careerup 2.3.1 – < 2.3.1 2.3.1

References