Lucene search
+L

39 matches found

EUVD
EUVD
•added 2026/04/13 9:30 p.m.•13 views

EUVD-2026-22067

A vulnerability was identified in CodeAstro Online Job Portal 1.0. The impacted element is an unknown function of the file /jobs/job-delete.php of the component Delete Job Posting Handler. Such manipulation of the argument ID leads to improper access controls. The attack can be launched remotely...

5.5CVSS5.5AI score0.00381EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/04/13 7:00 p.m.•12 views

CVE-2026-6201 CodeAstro Online Job Portal Delete Job Posting job-delete.php access control

A vulnerability was identified in CodeAstro Online Job Portal 1.0. The impacted element is an unknown function of the file /jobs/job-delete.php of the component Delete Job Posting Handler. Such manipulation of the argument ID leads to improper access controls. The attack can be launched remotely...

5.5CVSS5.8AI score0.00381EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/04/13 7:00 p.m.•35 views

CVE-2026-6201 CodeAstro Online Job Portal Delete Job Posting job-delete.php access control

A vulnerability was identified in CodeAstro Online Job Portal 1.0. The impacted element is an unknown function of the file /jobs/job-delete.php of the component Delete Job Posting Handler. Such manipulation of the argument ID leads to improper access controls. The attack can be launched remotely...

5.5CVSS0.00381EPSS
SaveExploits0References5
CVE
CVE
•added 2026/04/13 7:00 p.m.•24 views

CVE-2026-6201

CVE-2026-6201 affects CodeAstro Online Job Portal 1.0. The vulnerability is in the Delete Job Posting Handler, specifically an issue in the /jobs/job-delete.php file where manipulating the argument ID allows improper access controls to be bypassed. It is exploitable remotely (attack vector: netwo...

5.5CVSS5.8AI score0.00381EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/13 12:00 a.m.•0 views

CVE-2026-6201: Improper Access Control

A vulnerability was identified in CodeAstro Online Job Portal 1.0. The impacted element is an unknown function of the file /jobs/job-delete.php of the component Delete Job Posting Handler. Such manipulation of the argument ID leads to improper access controls. The attack can be launched remotely...

5.5CVSS5.5AI score0.00381EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/13 12:00 a.m.•23 views

PT-2026-32506

A vulnerability was identified in CodeAstro Online Job Portal 1.0. The impacted element is an unknown function of the file /jobs/job-delete.php of the component Delete Job Posting Handler. Such manipulation of the argument ID leads to improper access controls. The attack can be launched remotely...

5.5CVSS5.5AI score0.00381EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/04/13 12:00 a.m.•14 views

CodeAstro Online Job Portal 访问控制错误漏洞

CodeAstro Online Job Portal is an online job portal operated by CodeAstro Corporation. Version 1.0 of CodeAstro Online Job Portal has a vulnerability related to access control. This vulnerability stems from improper access control in the operation of the parameter ID in the file/jobs/job-delete.p...

5.5CVSS6AI score0.00381EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/01/25 9:17 a.m.•27 views

CVE-2025-12836

The VK Google Job Posting Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Job Description field in versions up to, and including, 1.2.23 due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticat...

6.4CVSS6.1AI score0.0028EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/24 8:16 a.m.•20 views

CVE-2025-12836

The VK Google Job Posting Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Job Description field in versions up to, and including, 1.2.23 due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticat...

6.4CVSS0.0028EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/01/24 7:26 a.m.•7 views

CVE-2025-12836

The VK Google Job Posting Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Job Description field in versions up to, and including, 1.2.20 due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticat...

6.4CVSS6AI score0.0028EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2026/01/24 12:15 a.m.•22 views

WordPress VK Google Job Posting Manager plugin <= 1.2.20 - Authenticated (Author+) Stored Cross-Site Scripting via Job Description Field vulnerability

Authenticated Author+ Stored Cross-Site Scripting via Job Description Field vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin VK Google Job Posting Manager versions = 1.2.20...

6.4CVSS5.4AI score0.0028EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/24 12:00 a.m.•0 views

CVE-2025-12836: Improper Neutralization of Input During Web Page Generation

The VK Google Job Posting Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Job Description field in versions up to, and including, 1.2.23 due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticat...

6.4CVSS6AI score0.0028EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/24 12:00 a.m.•27 views

WordPress plugin VK Google Job Posting Manager has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.4CVSS5.7AI score0.0028EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/12/17 10:03 a.m.•18 views

CVE-2025-68070

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vektor,Inc. VK Google Job Posting Manager vk-google-job-posting-manager allows Stored XSS.This issue affects VK Google Job Posting Manager: from n/a through = 1.2.22...

6.5CVSS5.9AI score0.00159EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/16 9:31 a.m.•18 views

EUVD-2025-203544

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vektor,Inc. VK Google Job Posting Manager vk-google-job-posting-manager allows Stored XSS.This issue affects VK Google Job Posting Manager: from n/a through = 1.2.21...

5.5AI score0.00159EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/16 9:16 a.m.•35 views

CVE-2025-68070

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vektor,Inc. VK Google Job Posting Manager vk-google-job-posting-manager allows Stored XSS.This issue affects VK Google Job Posting Manager: from n/a through = 1.2.22...

6.5CVSS0.00159EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/16 8:13 a.m.•50 views

CVE-2025-68070 WordPress VK Google Job Posting Manager plugin <= 1.2.22 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vektor,Inc. VK Google Job Posting Manager vk-google-job-posting-manager allows Stored XSS.This issue affects VK Google Job Posting Manager: from n/a through = 1.2.22...

6.5CVSS0.00159EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/16 8:13 a.m.•10 views

CVE-2025-68070 WordPress VK Google Job Posting Manager plugin <= 1.2.22 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vektor,Inc. VK Google Job Posting Manager vk-google-job-posting-manager allows Stored XSS.This issue affects VK Google Job Posting Manager: from n/a through = 1.2.22...

5.2AI score0.00159EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/16 8:13 a.m.•31 views

CVE-2025-68070

CVE-2025-68070 affects VK Google Job Posting Manager plugin for WordPress (

6.5CVSS5.9AI score0.00159EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/16 12:00 a.m.•1 views

CVE-2025-68070: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vektor,Inc. VK Google Job Posting Manager vk-google-job-posting-manager allows Stored XSS.This issue affects VK Google Job Posting Manager: from n/a through = 1.2.22...

6.5CVSS5.8AI score0.00159EPSS
SaveExploits0References1
Rows per page
Query Builder