Custom Field For WP Job Manager, CVE-2023-3328

CVE, Research URL: CVE-2023-3328
Home page URL: Security reports for Custom Field For WP Job Manager
Application: Custom Field For WP Job Manager
Published on: Aug 15, 2023
Research Description: The Custom Field For WP Job Manager WordPress plugin before 1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Affected versions: max 1.2.
Status: vulnerable