Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-4361
HistoryJun 07, 2023 - 2:15 a.m.

Authorization

2023-06-0702:15:00
PRIOn knowledge base
www.prio-n.com
authorization
jobsearch
wordpress
vulnerability
ajax
authentication
attackers

8.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.5%

The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the jobsearch_job_integrations_settin_save AJAX action in versions up to, and including, 1.8.1. This makes it possible for authenticated attackers to update arbitrary options on the site.

CPENameOperatorVersion
jobsearch_wp_job_boardle1.8.1

8.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.5%

Related for PRION:CVE-2021-4361