CVE-2025-0961
CVSS 2.0 Score 4 of 10 (medium)
Details
Published Feb 1, 2025
Updated: Feb 10, 2025
CWE ID 94
CWE ID 79
Summary
CVE-2025-0961 is a newly disclosed vulnerability affecting the code-projects Job Recruitment 1.0 software. This issue impacts an unspecified functionality within the file "/_parse/load-job-details.php." An attacker can exploit this cross-site scripting (XSS) vulnerability by manipulating the argument "business_stream_name/company_website_url." This exploit can be executed remotely, making it a significant security risk. The vulnerability details have been made public, increasing the likelihood of active exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Code Projects