Lucene search
+L

148 matches found

NVD
NVD
•added 2025/08/22 12:15 p.m.•10 views

CVE-2025-57887

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NooTheme Jobmonster noo-jobmonster allows Stored XSS.This issue affects Jobmonster: from n/a through = 4.8.0...

6.5CVSS0.00174EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/22 11:59 a.m.•8 views

CVE-2025-57888 WordPress Jobmonster Theme <= 4.8.0 - Sensitive Data Exposure Vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NooTheme Jobmonster allows Retrieve Embedded Sensitive Data. This issue affects Jobmonster: from n/a through 4.8.0...

5.3CVSS6.5AI score0.00251EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/22 11:59 a.m.•23 views

CVE-2025-57888 WordPress Jobmonster Theme <= 4.8.0 - Sensitive Data Exposure Vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NooTheme Jobmonster noo-jobmonster allows Retrieve Embedded Sensitive Data.This issue affects Jobmonster: from n/a through = 4.8.0...

5.3CVSS0.00251EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/22 11:59 a.m.•40 views

CVE-2025-57888

CVE-2025-57888 is a WordPress Jobmonster theme vulnerability (NooTheme) reported to affect versions up to 4.8.0. The issue exposes sensitive system information to an unauthorized control sphere, potentially enabling data leakage. Multiple sources (NVD, CVE lists, Patchstack, Red Hat advisory) cor...

5.3CVSS5.9AI score0.00251EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/22 11:59 a.m.•20 views

CVE-2025-57887 WordPress Jobmonster Theme <= 4.8.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NooTheme Jobmonster noo-jobmonster allows Stored XSS.This issue affects Jobmonster: from n/a through = 4.8.0...

6.5CVSS0.00174EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/22 11:59 a.m.•4 views

CVE-2025-57887 WordPress Jobmonster Theme <= 4.8.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NooTheme Jobmonster allows Stored XSS. This issue affects Jobmonster: from n/a through 4.8.0...

6.5CVSS6.4AI score0.00174EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/22 11:59 a.m.•28 views

CVE-2025-57887

CVE-2025-57887 describes a stored cross-site scripting vulnerability in the NooTheme Jobmonster WordPress theme, affecting versions up to 4.8.0. The root cause is improper neutralization of input during web page generation, enabling injection of malicious scripts into pages (Stored XSS). The CVE’...

6.5CVSS5.9AI score0.00174EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/22 8:30 a.m.•15 views

CVE-2025-53201

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NooTheme Jobmonster noo-jobmonster allows Reflected XSS.This issue affects Jobmonster: from n/a through = 4.7.8...

7.1CVSS5.9AI score0.003EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/22 12:00 a.m.•19 views

PT-2025-34353 · Nootheme · Jobmonster

Name of the Vulnerable Software and Affected Versions: NooTheme Jobmonster versions through 4.8.0 Description: A vulnerability exists in NooTheme Jobmonster that allows the retrieval of embedded sensitive data, potentially exposing sensitive system information to an unauthorized control sphere...

5.3CVSS6.7AI score0.00251EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/08/22 12:00 a.m.•11 views

PT-2025-34352 · Nootheme · Jobmonster

Name of the Vulnerable Software and Affected Versions: NooTheme Jobmonster versions through 4.8.0 Description: The software contains a Stored Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. This allows for the injection of malicious scripts into...

6.5CVSS6.5AI score0.00174EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/22 12:00 a.m.•2 views

CVE-2025-57888: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NooTheme Jobmonster noo-jobmonster allows Retrieve Embedded Sensitive Data.This issue affects Jobmonster: from n/a through = 4.8.0...

5.3CVSS5.8AI score0.00251EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/08/22 12:00 a.m.•16 views

WordPress Jobmonster Theme <= 4.8.0 is vulnerable to Sensitive Data Exposure

Software Jobmonster Type Theme Vulnerable versions = 4.8.0 Fixed in 4.8.1 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2025-57888 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID d34cfa4cbbae Credits Ananda Dhakal Patchstack Required...

5.3CVSS6.9AI score0.00251EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/22 12:00 a.m.•2 views

CVE-2025-57887: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NooTheme Jobmonster noo-jobmonster allows Stored XSS.This issue affects Jobmonster: from n/a through = 4.8.0...

6.5CVSS5.8AI score0.00174EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/08/22 12:00 a.m.•13 views

WordPress Jobmonster Theme <= 4.8.0 is vulnerable to Cross Site Scripting (XSS)

Software Jobmonster Type Theme Vulnerable versions = 4.8.0 Fixed in 4.8.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-57887 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 409b4cb6ad34 Credits Ananda Dhakal Patchstack Required privilege...

6.5CVSS6.9AI score0.00174EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2025/08/22 12:00 a.m.•17 views

WordPress plugin Jobmonster 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

5.3CVSS6.2AI score0.00251EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/08/22 12:00 a.m.•9 views

WordPress plugin Jobmonster 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.8AI score0.00174EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2025/08/21 10:39 a.m.•15 views

WordPress Jobmonster Theme <= 4.7.9 - Broken Authentication Vulnerability

Broken Authentication Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Jobmonster versions = 4.7.9...

9.8CVSS6.9AI score0.00422EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/08/21 12:00 a.m.•14 views

WordPress Jobmonster Theme <= 4.7.9 is vulnerable to Broken Authentication

Software Jobmonster Type Theme Vulnerable versions = 4.7.9 Fixed in 4.8.0 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2025-54738 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 87e1e5542be4 Credits Tran Nguyen...

9.8CVSS6.5AI score0.00422EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/08/21 12:00 a.m.•18 views

PT-2025-35077

Name of the Vulnerable Software and Affected Versions NooTheme Jobmonster versions through 4.7.9 Description An Authentication Bypass Using an Alternate Path or Channel vulnerability exists in NooTheme Jobmonster, allowing Authentication Abuse. Recommendations Update NooTheme Jobmonster to a...

9.8CVSS6.4AI score0.00422EPSS
SaveExploits0References10
NVD
NVD
•added 2025/08/20 8:15 a.m.•15 views

CVE-2025-53201

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NooTheme Jobmonster noo-jobmonster allows Reflected XSS.This issue affects Jobmonster: from n/a through = 4.7.8...

7.1CVSS0.003EPSS
SaveExploits0References1
Rows per page
Query Builder