CVE-2022-1168CWE-79

CVE-2022-1168: falha em WP JobSearch

JobSearch < 1.5.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)

Publicada em · Atualizada em

18Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendepss 1.8%
probabilidade de exploração
1.8%top 22% das CVEs
exploração observada
nãonenhuma fonte reporta
There is a Cross-Site Scripting vulnerability in the JobSearch WP JobSearch WordPress plugin before 1.5.1.
Produtos afetados
Unknown · WP JobSearch
CVEs relacionadas — WP JobSearch

No mesmo produto, das mais perigosas para as menos.

CVE-2021-24421—WP JobSearch < 1.7.4 - Authenticated Stored XSSEPSS 0.6%CVE-2023-6585HIGHJobSearch WP Job Board < 2.3.4 - Arbitrary File Upload to RCEEPSS 0.6%CVE-2023-6584HIGHJobSearch WP Job Board < 2.3.4 - Authentication BypassEPSS 0.5%
Referências
https://codecanyon.net/item/jobsearch-wp-job-board-wordpress-plugin/21066856https://wpscan.com/vulnerability/bcf38e87-011e-4540-8bfb-c93443a4a490