Basic Job Site Script Project
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Basic Job Site Script Project records in CISA KEVNo Basic Job Site Script Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 46
Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02204 · Published 2017-12-13 · No fix listed CWE-89
Priority MEDIUM 44
Readymade Job Site Script has SQL Injection via the location_name array parameter to the /job URI.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01161 · Published 2017-12-24 · No fix listed CWE-89
Priority LOW 39
Readymade Job Site Script has CSRF via the /job URI.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.00505 · Published 2017-12-24 · No fix listed CWE-352
Priority LOW 28
Readymade Job Site Script has XSS via the keyword parameter to the /job URI.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00683 · Published 2017-12-24 · No fix listed CWE-79
Open these records in search →