Lucene search
+L

3 matches found

OSV
OSV
added 2021/10/19 3:15 p.m.6 views

CVE-2021-39355

The Indeed Job Importer WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /indeed-job-importer/trunk/indeed-job-importer.php file which allowed attackers with administrative user access to inject...

4.8CVSS5.8AI score0.00989EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2021/10/19 2:15 p.m.35 views

CVE-2021-39355 Indeed Job Importer <= 1.0.5 Authenticated Stored Cross-Site Scripting

The Indeed Job Importer WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /indeed-job-importer/trunk/indeed-job-importer.php file which allowed attackers with administrative user access to inject...

5.5CVSS5.4AI score0.00989EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/10/19 12:0 a.m.8 views

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress plugin Indeed Job Importer version 1.0.5 an...

5.5CVSS5.1AI score0.00989EPSS
SaveExploits1References5
Rows per page
Query Builder