There are unauthenticated reflected Cross-Site Scripting (XSS) vulnerabilities in CareerUp Careerup WordPress theme prior to 2.3.1, via the filter parameters.
apusthemes careerup