Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-4352
HistoryJun 07, 2023 - 2:15 a.m.

Authorization

2023-06-0702:15:00
PRIOn knowledge base
www.prio-n.com
5
jobsearch
wordpress
vulnerability
capability check
unauthenticated attackers
plugin settings

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.4%

The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the save_locsettings function in versions up to, and including, 1.8.1. This makes it possible for unauthenticated attackers to change the settings of the plugin.

CPENameOperatorVersion
jobsearch_wp_job_boardle1.8.1

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.4%

Related for PRION:CVE-2021-4352