Lucene search
+L

6 matches found

osv_cve
osv_cve
•added 2021/10/19 3:15 p.m.•15 views

CVE-2021-39355

The Indeed Job Importer WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /indeed-job-importer/trunk/indeed-job-importer.php file which allowed attackers with administrative user access to inject...

4.8CVSS5.8AI score0.00989EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2021/10/19 2:15 p.m.•45 views

CVE-2021-39355 Indeed Job Importer <= 1.0.5 Authenticated Stored Cross-Site Scripting

The Indeed Job Importer WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /indeed-job-importer/trunk/indeed-job-importer.php file which allowed attackers with administrative user access to inject...

5.5CVSS5.4AI score0.00989EPSS
SaveExploits1References3
Mend
Mend
•added 2021/10/19 2:15 p.m.•5 views

CVE-2021-39355

The Indeed Job Importer WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /indeed-job-importer/trunk/indeed-job-importer.php file which allowed attackers with administrative user access to inject...

5.5CVSS0.00989EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/19 12:00 a.m.•5 views

CVE-2021-39355: Improper Neutralization of Input During Web Page Generation

The Indeed Job Importer WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /indeed-job-importer/trunk/indeed-job-importer.php file which allowed attackers with administrative user access to inject...

5.5CVSS5.7AI score0.00989EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/10/19 12:00 a.m.•6 views

PT-2021-22561

Name of the Vulnerable Software and Affected Versions: Indeed Job Importer WordPress plugin versions up to and including 1.0.5 Description: The issue arises from insufficient input validation and sanitization via several parameters in the indeed-job-importer.php file, allowing attackers with...

5.5CVSS0.00989EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2021/10/19 12:00 a.m.•15 views

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress plugin Indeed Job Importer version 1.0.5 an...

5.5CVSS5.1AI score0.00989EPSS
SaveExploits1References5
Rows per page
Query Builder