Input validation vulnerability in JobSearch WP Job Board 1.5.1

The JobSearch WP Job Board plugin for WordPress is vulnerable to a type of cyber attack known as Stored Cross-Site Scripting. This means that in versions up to and including 1.5.1, an attacker who is logged in to the system can inject malicious web scripts into certain fields in a user profile on the user dashboard. These fields include Phone, Dial Code, Job Title, Academic Level, Age, Salary, Gender, Industry, and Full Address. When a user visits an infected page, the malicious scripts will execute on their device. This could allow the attacker to gain access to sensitive information or even control the user’s device.