Lucene search

K
cvelistWPScanCVELIST:CVE-2022-2544
HistoryAug 22, 2022 - 3:03 p.m.

CVE-2022-2544 Ninja Job Board < 1.3.3 - Resume Disclosure via Directory Listing

2022-08-2215:03:39
CWE-425
WPScan
www.cve.org

0.011 Low

EPSS

Percentile

84.7%

The Ninja Job Board WordPress plugin before 1.3.3 does not protect the directory where it stores uploaded resumes, making it vulnerable to unauthenticated Directory Listing which allows the download of uploaded resumes.

CNA Affected

[
  {
    "product": "Ninja Job Board – Ultimate WordPress Job Board Plugin",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "1.3.3",
        "status": "affected",
        "version": "1.3.3",
        "versionType": "custom"
      }
    ]
  }
]

0.011 Low

EPSS

Percentile

84.7%