Vulnerabilities

TI-2021-16703 CVE-2021-39336 · GHSA-7m4g-93cj-64cg

Job Manager <= 0.7.25 Authenticated Stored Cross-Site Scripting

LOW 27

The Job Manager WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/admin-jobs.php file which allowed attackers with a…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00909 Published 2021-10-15 No fix listed CWE-79

TI-2012-05415 CVE-2012-6713 · GHSA-pf7h-q6w9-g499

The job-manager plugin before 0.7.19 for WordPress has multiple XSS issues.

LOW 29

The job-manager plugin before 0.7.19 for WordPress has multiple XSS issues.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00923 Published 2019-08-13 No fix listed CWE-79

TI-2015-05587 CVE-2015-6668 · GHSA-6m7w-4635-j5fp

The Job Manager plugin before 0.7.25 allows remote attackers to read arbitrary CV files…

MEDIUM 45

The Job Manager plugin before 0.7.25 allows remote attackers to read arbitrary CV files via a brute force attack to the WordPress upload directory structure, related to an insecure direct object reference.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.09845 Published 2017-10-19 No fix listed CWE-200

Vulnerabilities

Filters

Job Manager <= 0.7.25 Authenticated Stored Cross-Site Scripting

The job-manager plugin before 0.7.19 for WordPress has multiple XSS issues.

The Job Manager plugin before 0.7.25 allows remote attackers to read arbitrary CV files…