PT-2025-51454
CVE-2025-68070
·
Published
2025-12-15
·
Updated
2026-10-05
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Vektor,Inc. VK Google Job Posting Manager versions through 1.2.21
Description
The software contains a flaw related to improper input handling during web page generation, which allows for Cross-site Scripting (XSS). This allows for the injection of malicious scripts into web pages viewed by other users. The affected component is VK Google Job Posting Manager.
Recommendations
Update Vektor,Inc. VK Google Job Posting Manager to a version later than 1.2.21.
Found an issue in the description? Have something to add? Feel free to write us 👾