CVE-2022-1168CWE-79

CVE-2022-1168: vulnerability in WP JobSearch

JobSearch < 1.5.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)

Published · Updated

18Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 1.8%
exploitation probability
1.8%top 22% of all CVEs
observed exploitation
nono source reports it
There is a Cross-Site Scripting vulnerability in the JobSearch WP JobSearch WordPress plugin before 1.5.1.
Affected products
Unknown · WP JobSearch
Related CVEs — WP JobSearch

In the same product, most dangerous first.

CVE-2021-24421—WP JobSearch < 1.7.4 - Authenticated Stored XSSEPSS 0.6%CVE-2023-6585HIGHJobSearch WP Job Board < 2.3.4 - Arbitrary File Upload to RCEEPSS 0.6%CVE-2023-6584HIGHJobSearch WP Job Board < 2.3.4 - Authentication BypassEPSS 0.5%
References
https://codecanyon.net/item/jobsearch-wp-job-board-wordpress-plugin/21066856https://wpscan.com/vulnerability/bcf38e87-011e-4540-8bfb-c93443a4a490