Lucene search
+L

2 matches found

CVE
CVE
•added 2021/10/15 12:15 p.m.•64 views

CVE-2021-39334

The CVE-2021-39334 entry concerns the WordPress Job Board Vanila plugin (versions up to 1.0). It describes an authenticated Stored Cross-Site Scripting vulnerability via the psjb_exp_in and psjb_curr_in parameters in ~/job-settings.php, exploitable by users with administrative access, with impact...

5.5CVSS4.9AI score0.00909EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/15 12:00 a.m.•7 views

CVE-2021-39334: Improper Neutralization of Input During Web Page Generation

The Job Board Vanila WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via the psjbexpin and the psjbcurrin parameters found in the /job-settings.php file which allowed attackers with administrative user access to inject arbitrary...

5.5CVSS5.7AI score0.00909EPSS
SaveExploits1References2
Rows per page
Query Builder