Vulnerability: Persistent XSS in document pdf viewer

Symptoms

When a user has a Document Object, they can upload a pdf-file to it.
When the user opens the pdf-file, this will execute any malicious code embedded in the file.

Affected version

RunMyJobs 2025.1 and previous versions.

Resolution

This will be fixed in a future version 2025.2.0.0

Reference 

RCORE-49764