The Jobs for WordPress plugin before 2.7.8 does not sanitise and escape some of its Job settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacksCreditsKrugov ArtyomWPScanReferenceshttps://wpscan.com/vulnerability/f0a9c8ae-f2cf-4322-8216-4778b0e37a48/