Lucene search
+L

326 matches found

RedhatCVE
RedhatCVE
•added 2025/07/06 11:21 a.m.•33 views

CVE-2025-52798

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eyecix JobSearch wp-jobsearch allows Reflected XSS.This issue affects JobSearch: from n/a through 3.0.6...

7.1CVSS5.9AI score0.00211EPSS
SaveExploits0References1
NVD
NVD
•added 2025/07/04 12:15 p.m.•40 views

CVE-2025-52798

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eyecix JobSearch wp-jobsearch allows Reflected XSS.This issue affects JobSearch: from n/a through 3.0.6...

7.1CVSS0.00211EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/07/04 11:17 a.m.•12 views

CVE-2025-52798 WordPress JobSearch <= 2.9.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eyecix JobSearch allows Reflected XSS. This issue affects JobSearch: from n/a through 2.9.0...

7.1CVSS5.8AI score0.00211EPSS
SaveExploits0References1
CVE
CVE
•added 2025/07/04 11:17 a.m.•46 views

CVE-2025-52798

CVE-2025-52798 is a Reflected XSS in the WordPress JobSearch plugin. The issue arises from improper input neutralization during web page generation, enabling an attacker to inject scripts via the JobSearch UI. Affected software: WordPress JobSearch (plugin) versions up to 2.9.0. CVSS v3.1 base sc...

7.1CVSS5.8AI score0.00211EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/07/04 11:17 a.m.•32 views

CVE-2025-52798 WordPress JobSearch plugin < 3.0.6 - Reflected Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eyecix JobSearch wp-jobsearch allows Reflected XSS.This issue affects JobSearch: from n/a through 3.0.6...

7.1CVSS0.00211EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/04 12:00 a.m.•7 views

CVE-2025-52798: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eyecix JobSearch wp-jobsearch allows Reflected XSS.This issue affects JobSearch: from n/a through 3.0.6...

7.1CVSS5.8AI score0.00211EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/07/04 12:00 a.m.•25 views

WordPress plugin JobSearch has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

7.1CVSS5.5AI score0.00211EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/07/04 12:00 a.m.•30 views

PT-2025-27935 · Unknown · Eyecix Jobsearch

Name of the Vulnerable Software and Affected Versions: eyecix JobSearch versions n/a through 2.9.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inje...

7.1CVSS6AI score0.00211EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/06/23 8:40 a.m.•25 views

CVE-2025-49978

Authorization Bypass Through User-Controlled Key vulnerability in eyecix JobSearch wp-jobsearch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobSearch: from n/a through 3.0.6...

4.3CVSS5.9AI score0.00385EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/20 3:15 p.m.•20 views

CVE-2025-49978

Authorization Bypass Through User-Controlled Key vulnerability in eyecix JobSearch wp-jobsearch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobSearch: from n/a through 3.0.6...

4.3CVSS0.00385EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/06/20 3:04 p.m.•42 views

CVE-2025-49978 WordPress JobSearch plugin < 3.0.6 - Insecure Direct Object References (IDOR) Vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in eyecix JobSearch wp-jobsearch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobSearch: from n/a through 3.0.6...

4.3CVSS0.00385EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/06/20 3:04 p.m.•14 views

CVE-2025-49978 WordPress JobSearch plugin <= 2.9.0 - Insecure Direct Object References (IDOR) Vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in eyecix JobSearch allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JobSearch: from n/a through 2.9.0...

4.3CVSS6AI score0.00385EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/20 3:04 p.m.•53 views

CVE-2025-49978

CVE-2025-49978 describes an Insecure Direct Object References (IDOR) vulnerability in the WordPress JobSearch plugin (WP Job Board) versions n/a through 2.9.0. The issue is an Authorization Bypass Through User-Controlled Key , enabling bypass of access controls for certain resources. This is supp...

4.3CVSS6AI score0.00385EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/20 12:00 a.m.•10 views

CVE-2025-49978: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in eyecix JobSearch wp-jobsearch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobSearch: from n/a through 3.0.6...

4.3CVSS6AI score0.00385EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/06/20 12:00 a.m.•25 views

PT-2025-26346 · Eyecix · Eyecix Jobsearch

Name of the Vulnerable Software and Affected Versions: eyecix JobSearch versions n/a through 2.9.0 Description: The issue affects eyecix JobSearch, allowing exploitation of incorrectly configured access control security levels through an Authorization Bypass Through User-Controlled Key...

4.3CVSS6.2AI score0.00385EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/06/20 12:00 a.m.•21 views

WordPress plugin JobSearch has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS5.8AI score0.00385EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/06/19 4:34 p.m.•26 views

WordPress JobSearch plugin < 3.0.6 - Insecure Direct Object References (IDOR) Vulnerability

Insecure Direct Object References IDOR Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin JobSearch versions 3.0.6...

4.3CVSS6.8AI score0.00385EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/05/23 9:49 a.m.•22 views

CVE-2024-43928

Missing Authorization vulnerability in eyecix JobSearch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobSearch: from n/a through 2.5.4...

8.8CVSS6AI score0.00383EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/23 6:37 a.m.•24 views

CVE-2024-43929

Missing Authorization vulnerability in eyecix JobSearch allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JobSearch: from n/a through 2.5.4...

9.8CVSS5.8AI score0.00433EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 6:19 a.m.•23 views

CVE-2024-43930

Cross-Site Request Forgery CSRF vulnerability in eyecix JobSearch allows Cross Site Request Forgery.This issue affects JobSearch: from n/a through 2.5.3...

4.3CVSS7AI score0.00183EPSS
SaveExploits0References1
Rows per page
Query Builder