CVE-2025-68070
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vektor,Inc. VK Google Job Posting Manager vk-google-job-posting-manager allows Stored XSS. This issue affects VK Google Job Posting Manager: from n/a through <= 1.2.22.
Risk Assessment
Stored XSS can allow an attacker to execute malicious scripts in a user's browser, potentially leading to session or data theft.
Recommendation
Update VK Google Job Posting Manager to a version later than 1.2.22 if available.
Other vulnerabilities in VK Google Job Posting Manager
Original NVD description (English source)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vektor,Inc. VK Google Job Posting Manager vk-google-job-posting-manager allows Stored XSS.This issue affects VK Google Job Posting Manager: from n/a through <= 1.2.22.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS