CVE-2023-6585

2024-02-2709:15:37

[email protected]

web.nvd.nist.gov

2777

cve-2023-6585

wp jobsearch

wordpress plugin

file upload vulnerability

unauthenticated attackers

nvd

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

The WP JobSearch WordPress plugin before 2.3.4 does not validate files to be uploaded, which could allow unauthenticated attackers to upload arbitrary files such as PHP on the server

Affected configurations

Vulners

Node

eyecixjobsearch_wp_job_boardRange<2.3.4

VendorProductVersionCPE
eyecixjobsearch_wp_job_board*cpe:2.3:a:eyecix:jobsearch_wp_job_board:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
eyecix	jobsearch_wp_job_board	*	cpe:2.3:a:eyecix:jobsearch_wp_job_board::::::::

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "WP JobSearch",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThan": "2.3.4"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

wpscan.com/vulnerability/757412f4-e4f8-4007-8e3b-639a72b33180/