CVE-2023-51545

Cross-Site Request Forgery CSRF, Deserialization of Untrusted Data vulnerability in ThemeHigh Job Manager & Career – Manage job board listings, and recruitments.This issue affects Job Manager & Career – Manage job board listings, and recruitments: from n/a through 1.4.4...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF, Deserialization of Untrusted Data vulnerability in ThemeHigh Job Manager & Career – Manage job board listings, and recruitments.This issue affects Job Manager & Career – Manage job board listings, and recruitments: from n/a through 1.4.4...

CVE-2023-51545 WordPress Job Manager & Career Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injection

Cross-Site Request Forgery CSRF, Deserialization of Untrusted Data vulnerability in ThemeHigh Job Manager & Career – Manage job board listings, and recruitments.This issue affects Job Manager & Career – Manage job board listings, and recruitments: from n/a through 1.4.4...

CVE-2023-51545

CVE-2023-51545 affects the WordPress plugin "Job Manager & Career – Manage job board listings, and recruitments" (ThemeHigh). Description in connected docs indicates a Cross-Site Request Forgery leading to PHP object injection, impacting versions up to 1.4.4 (no specific vulnerable version range ...

WordPress Plugin Job Manager & Career Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists in t...

WordPress Job Manager & Career Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Job Manager & Career Type Plugin Vulnerable versions = 1.4.4 Fixed in 1.4.5 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-51545 Patch priority Low CVSS severity Low 9.6 Developer Claim ownership PSID 44198ff13061 Credits Rafie Muhammad...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eDoc Intelligence eDoc Employee Job Application – Best WordPress Job Manager for Employees allows Reflected XSS.This issue affects eDoc Employee Job Application – Best WordPress Job Manager for...

CVE-2023-48322

CVE-2023-48322 affects the WordPress plugin “eDoc Employee Job Application – Best WordPress Job Manager for Employees” (versions up to and including 1.13). The vulnerability is a Reflected Cross-Site Scripting (XSS) caused by improper input neutralization during web page generation. Public source...

CVE-2023-5906

The Job Manager & Career WordPress plugin before 1.4.4 contains a vulnerability in the Directory Listings system, which allows an unauthorized user to view and download private files of other users. This vulnerability poses a serious security threat because it allows an attacker to gain access to...

CVE-2023-5906

The Job Manager & Career WordPress plugin before 1.4.4 contains a vulnerability in the Directory Listings system, which allows an unauthorized user to view and download private files of other users. This vulnerability poses a serious security threat because it allows an attacker to gain access to...

CVE-2023-5906 Job Manager & Career < 1.4.4 - Directory listing to Sensitive Data Exposure

The Job Manager & Career WordPress plugin before 1.4.4 contains a vulnerability in the Directory Listings system, which allows an unauthorized user to view and download private files of other users. This vulnerability poses a serious security threat because it allows an attacker to gain access to...

CVE-2023-5906

CVE-2023-5906 affects the Job Manager & Career WordPress plugin (versions before 1.4.4). The issue stems from the Directory Listings system, allowing unauthenticated users to view and download private files belonging to other users, exposing confidential data. The CVE entry notes high impact (CVE...

WordPress plugin Job Manager & Career security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A security vulnerability exists in the WordPress...

PT-2023-32412 · WordPress · Job Manager & Career

Name of the Vulnerable Software and Affected Versions: Job Manager & Career WordPress plugin versions prior to 1.4.4 Description: The issue allows an unauthorized user to view and download private files of other users due to a vulnerability in the Directory Listings system. This poses a serious...

CVE-2023-31087

Cross-Site Request Forgery CSRF vulnerability in JoomSky JS Job Manager plugin = 2.0.0 versions...

CVE-2023-31087

Cross-Site Request Forgery CSRF vulnerability in JoomSky JS Job Manager plugin = 2.0.0 versions...

CVE-2023-31087 WordPress JS Jobs Manager plugin <= 2.0.0 - Cross Site Request Forgery (CSRF) vulnerability

A vulnerability in JoomSky JS Job Manager js-jobs.This issue affects JS Job Manager: from n/a through = 2.0.0...

CVE-2023-31087

CVE-2023-31087 – JoomSky JS Job Manager (WordPress) CSRF vulnerability in versions 2.0.0, specifically 2.0.1 per PatchStack, to mitigate. Impact is described variably across sources; Wordfence lists CSRF via multiple functions and patch status as Patched, while CVSS scales differ between sources...

WordPress Job Manager & Career Plugin < 1.4.4 is vulnerable to Sensitive Data Exposure

Software Job Manager & Career Type Plugin Vulnerable versions 1.4.4 Fixed in 1.4.4 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-5906 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID 4d36f550a2ca Credits Dmitrii Ignatyev Requir...

PT-2023-23143 · Joomsky · Joomsky Js Job Manager

Name of the Vulnerable Software and Affected Versions: JoomSky JS Job Manager plugin versions = 2.0.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application th...