Vulnerability history

Authenticated (Editor+) Stored Cross-Site Scripting via Job Description Field vulnerability

Authenticated (Subscriber+) Arbitrary File Read vulnerability

SQL Injection Vulnerability

Arbitrary File Download Vulnerability

Insecure Direct Object References (IDOR) Vulnerability

Local File Inclusion vulnerability

Local File Inclusion vulnerability

Insecure Direct Object Reference to Authenticated (Subscriber+) User Photo Disconnection vulnerability

Insecure Direct Object Reference to Unauthenticated Arbitrary Resume Download vulnerability

Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Company Deletion vulnerability

Missing Authorization to Unauthenticated Arbitrary Email Sending vulnerability

Insecure Direct Object Reference to Unauthenticated Company Logo Deletion vulnerability

WordPress WP Job Portal plugin <= 2.2.5- Authenticated (Subscriber+) Insecure Direct Object Reference vulnerability

Authenticated (Subscriber+) Insecure Direct Object Reference vulnerability

Cross Site Scripting (XSS) vulnerability

Unauthenticated Local File Inclusion, Arbitrary Settings Update, and User Creation vulnerability

Insecure Direct Object References (IDOR) vulnerability

Cross Site Scripting (XSS) vulnerability

Cross Site Scripting (XSS) vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated SQLi vulnerability

Broken Access Control vulnerability

Cross Site Scripting (XSS)