Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2021/10/15 12:15 p.m.27 views

CVE-2021-39334 Job Board Vanila Plugin <= 1.0 Authenticated Stored Cross-Site Scripting

The Job Board Vanila WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via the psjbexpin and the psjbcurrin parameters found in the /job-settings.php file which allowed attackers with administrative user access to inject arbitrary...

5.5CVSS5.4AI score0.00909EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2021/10/15 12:15 p.m.8 views

CVE-2021-39334 Job Board Vanila Plugin <= 1.0 Authenticated Stored Cross-Site Scripting

The Job Board Vanila WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via the psjbexpin and the psjbcurrin parameters found in the /job-settings.php file which allowed attackers with administrative user access to inject arbitrary...

5.5CVSS5.8AI score0.00909EPSS
SaveExploits1References3
CVE
CVE
added 2021/10/15 12:15 p.m.47 views

CVE-2021-39334

The CVE-2021-39334 entry concerns the WordPress Job Board Vanila plugin (versions up to 1.0). It describes an authenticated Stored Cross-Site Scripting vulnerability via the psjb_exp_in and psjb_curr_in parameters in ~/job-settings.php, exploitable by users with administrative access, with impact...

5.5CVSS4.9AI score0.00909EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder