Code-Projects Job Recruitment Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in Code-Projects Job Recruitment version 1.0. The issue arises in the file '_call_job_search_ajax.php', where the 'job_type' parameter is not properly sanitized, allowing for the injection of malicious scripts. This vulnerability can be exploited remotely, potentially leading to the execution of scripts in the context of the user.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, send a GET request to '_parse/_call_job_search_ajax.php' with a crafted 'job_type' parameter that includes the desired script payload. The response will reflect the injected script, demonstrating the cross-site scripting vulnerability.