Lucene search
+L

32 matches found

OSV
OSV
added 2019/09/03 12:15 p.m.9 views

CVE-2019-15869

The JobCareer theme before 2.5.1 for WordPress has stored XSS...

5.4CVSS6.1AI score0.00736EPSS
SaveExploits2References1
NVD
NVD
added 2019/09/03 12:15 p.m.18 views

CVE-2019-15869

The JobCareer theme before 2.5.1 for WordPress has stored XSS...

5.4CVSS5.6AI score0.00736EPSS
SaveExploits2References1
Prion
Prion
added 2019/09/03 12:15 p.m.21 views

Cross site scripting

The JobCareer theme before 2.5.1 for WordPress has stored XSS...

3.5CVSS5.6AI score0.00736EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2019/09/03 11:57 a.m.23 views

CVE-2019-15869

The JobCareer theme before 2.5.1 for WordPress has stored XSS...

5.6AI score0.00736EPSS
SaveExploits2References1
CVE
CVE
added 2019/09/03 11:57 a.m.67 views

CVE-2019-15869

The CVE-2019-15869 entries confirm a stored XSS vulnerability in the WordPress JobCareer theme prior to version 2.5.1. The issue is described as an authentication-relevant, stored cross-site scripting flaw affecting input fields (notably in resume/profile areas) where bad input filtering allows a...

5.4CVSS5.5AI score0.00736EPSS
SaveExploits2References1Affected Software1
CNVD
CNVD
added 2019/09/03 12:00 a.m.13 views

WordPress JobCareer theme cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.JobCareer theme is a plugin used in one of the job board themes. A cross-site scripting vulnerability exists in WordPress JobCareer the...

5.4CVSS6.2AI score0.00736EPSS
SaveExploits2References1
Patchstack
Patchstack
added 2019/06/11 12:00 a.m.22 views

WordPress JobCareer theme - 2.5 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability found by QUIXSS in WordPress JobCareer theme version 2.5. Solution Update the WordPress JobCareer theme to the latest available version at least 2.5.1...

1.5AI score
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2019/04/24 12:00 a.m.22 views

JobCareer < 2.5.1 - Authenticated Stored Cross-Site Scripting

Bad input fields data filtering has been discovered in the 'JobCareer | Job Board Responsive WordPress Theme'. PoC http://jobcareer.chimpgroup.com/candidate/asdasdasdasdasd/ Register a new account on the demo website: http://jobcareer.chimpgroup.com/ , then go to the «Resume» profile tab:...

3.5CVSS0.3AI score0.00736EPSS
SaveExploits2References1Affected Software1
wpexploit
wpexploit
added 2019/04/24 12:00 a.m.28 views

JobCareer < 2.5.1 - Authenticated Stored Cross-Site Scripting

Bad input fields data filtering has been discovered in the 'JobCareer | Job Board Responsive WordPress Theme'. http://jobcareer.chimpgroup.com/candidate/asdasdasdasdasd/ Register a new account on the demo website: http://jobcareer.chimpgroup.com/ , then go to the «Resume» profile tab:...

3.5CVSS0.3AI score0.00736EPSS
SaveExploits2References1
Patchstack
Patchstack
added 2018/12/24 12:00 a.m.10 views

WordPress JobCareer premium theme <= 2.4 - User enumeration & Password Reset vulnerabilities

User enumeration & Password Reset vulnerabilities found by Anthony MAESTRE in WordPress JobCareer premium theme versions = 2.4. Solution Update the WordPress JobCareer premium theme to the latest available version at least 2.4.1...

3.1AI score
SaveExploits0References2Affected Software1
WPVulnDB
WPVulnDB
added 2018/12/04 12:00 a.m.22 views

JobCareer < 2.4.1 - User enumeration & Reset password

The theme used a vulnerable version of the WP-jobhunt plugin affected by the issues below: CVE-2018-19487: The WP-jobhunt plugin before version 2.4 for WordPress does not control AJAX requests sent to the csemployerajaxprofile function through the admin-ajax.php file, which allows remote...

7.5CVSS5AI score0.04852EPSS
SaveExploits2References2Affected Software2
Openbugbounty
Openbugbounty
added 2017/09/26 1:28 p.m.14 views

penza.jobcareer.ru XSS vulnerability

Vulnerable URL: http://penza.jobcareer.ru/jobs/scriptalert-openbugbountyscript/?feed=\n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:|...

6.3AI score
SaveExploits0
Rows per page
Query Builder