CVE-2022-4061 JobBoardWP < 1.2.2 - Unauthenticated Arbitrary File Upload

2022-12-1913:41:42

WPScan

www.cve.org

jobboardwp

cve-2022-4061

unauthenticated

file upload

arbitrary file

wordpress

plugin

0.002 Low

EPSS

Percentile

52.9%

JSON

The JobBoardWP WordPress plugin before 1.2.2 does not properly validate file names and types in its file upload functionalities, allowing unauthenticated users to upload arbitrary files such as PHP.

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "JobBoardWP",
    "collectionURL": "https://wordpress.org/plugins",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "1.2.2"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

wpscan.com/vulnerability/fec68e6e-f612-43c8-8301-80f7ae3be665

0.002 Low

EPSS

Percentile

52.9%

JSON

Related for CVELIST:CVE-2022-4061