The Jobs for WordPress plugin before 2.7.4 does not sanitise and escape some parameters, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacksCreditscyc707WPScanReferenceshttps://wpscan.com/vulnerability/fc091bbd-7338-4bd4-add5-e46502a9a949/