Lucene search

K
nvd[email protected]NVD:CVE-2023-6585
HistoryFeb 27, 2024 - 9:15 a.m.

CVE-2023-6585

2024-02-2709:15:37
web.nvd.nist.gov
wordpress
jobsearch
file upload
security vulnerability
unauthenticated

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

The WP JobSearch WordPress plugin before 2.3.4 does not validate files to be uploaded, which could allow unauthenticated attackers to upload arbitrary files such as PHP on the server

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for NVD:CVE-2023-6585