Lucene search
HistoryDec 19, 2022 - 2:15 p.m.
CVE-2022-4061
jobboardwp
unauthenticated upload
file validation
cve-2022-4061
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
0.002 Low
EPSS
Percentile
52.9%
The JobBoardWP WordPress plugin before 1.2.2 does not properly validate file names and types in its file upload functionalities, allowing unauthenticated users to upload arbitrary files such as PHP.
Affected configurations
Node
ultimatememberjobboardwpRange<1.2.2wordpress
Related
prion
prion
Default credentials
2022-12-19 14:15:00
wpexploit
wpexploit
JobBoardWP < 1.2.2 - Unauthenticated Arbitrary File Upload
2022-11-28 00:00:00
cve
cve
CVE-2022-4061
2022-12-19 14:15:12
wpvulndb
wpvulndb
JobBoardWP < 1.2.2 - Unauthenticated Arbitrary File Upload
2022-11-28 00:00:00
cvelist
cvelist
CVE-2022-4061 JobBoardWP < 1.2.2 - Unauthenticated Arbitrary File Upload
2022-12-19 13:41:42
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
0.002 Low
EPSS
Percentile
52.9%
Related for NVD:CVE-2022-4061