Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: NooTheme Component: Jobmonster Clear all filters
TI-2022-01059 CVE-2022-1170 · GHSA-7649-w6j9-939x

JobMonster < 4.5.2.9 - Unauthenticated Reflected Cross-Site Scripting

Priority LOW 31

In the Noo JobMonster WordPress theme before 4.5.2.9 JobMonster there is a XSS vulnerability as the input for the search form is provided through unsanitized GET requests.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01789 Published 2022-04-04 Fixed in 4.5.2.9 CWE-79
TI-2022-01055 CVE-2022-1166 · GHSA-952h-ff56-x6g3

JobMonster < 4.6.6.1 - Directory Listing in Upload Folder

Priority LOW 27

The JobMonster Theme was vulnerable to Directory Listing in the /wp-content/uploads/jobmonster/ folder, as it did not include a default PHP file, or .htaccess file.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01552 Published 2022-04-04 Fixed in 4.5.2.9 CWE-22