Vulnerabilities

TI-2019-15555 CVE-2019-25502 · GHSA-frc2-f774-gjwf

Simple Job Script Cross-Site Scripting via job_type_value Parameter

MEDIUM 56

Simple Job Script contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the job_type_value parameter in the jobs endpoint.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00299 Published 2026-03-04 No fix listed CWE-79

TI-2019-15554 CVE-2019-25501 · GHSA-crwm-cgwf-5xw8

Simple Job Script SQL Injection via delete_application_ajax.php

HIGH 77

Simple Job Script contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting malicious SQL code through the app_id parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00389 Published 2026-03-04 No fix listed CWE-89

TI-2019-15553 CVE-2019-25500 · GHSA-wxh9-p288-x5gx

Simple Job Script SQL Injection via register-recruiters endpoint

HIGH 77

Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the employerid parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00334 Published 2026-03-04 No fix listed CWE-89

TI-2019-15552 CVE-2019-25499 · GHSA-pg86-9pv6-9wq9

Simple Job Script SQL Injection via get_job_applications_ajax.php

HIGH 77

Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the job_id parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00516 Published 2026-03-04 No fix listed CWE-89

TI-2019-15551 CVE-2019-25498 · GHSA-qq24-w3jm-9r87

Simple Job Script SQL Injection via searched Endpoint

HIGH 77

Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the landing_location parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00417 Published 2026-03-04 No fix listed CWE-89

TI-2020-06930 CVE-2020-8645 · GHSA-4c5h-5vhg-qp6x

An issue was discovered in Simplejobscript.com SJS through 1.66.

MEDIUM 46

An issue was discovered in Simplejobscript.com SJS through 1.66.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01758 Published 2020-02-06 No fix listed CWE-89

TI-2020-06777 CVE-2020-8440 · GHSA-6fj3-6688-5jh7

controllers/page_apply.php in Simplejobscript.com SJS through 1.66 is prone to…

MEDIUM 47

controllers/page_apply.php in Simplejobscript.com SJS through 1.66 is prone to unauthenticated Remote Code Execution by uploading a PHP script as a resume.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02811 Published 2020-01-31 No fix listed CWE-434

TI-2020-05837 CVE-2020-7229 · GHSA-rpc9-q4wq-9649

An issue was discovered in Simplejobscript.com SJS before 1.65.

MEDIUM 45

An issue was discovered in Simplejobscript.com SJS before 1.65.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01469 Published 2020-01-21 No fix listed CWE-89

Vulnerabilities

Filters