Vulnerabilities (CVE)

Filtered by vendor Presstigers Subscribe
Filtered by product Simple Job Board
Total 5 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-52122 1 Presstigers 1 Simple Job Board 2024-01-11 N/A 8.8 HIGH
Cross-Site Request Forgery (CSRF) vulnerability in PressTigers Simple Job Board.This issue affects Simple Job Board: from n/a through 2.10.6.
CVE-2023-29440 1 Presstigers 1 Simple Job Board 2023-11-15 N/A 8.8 HIGH
Cross-Site Request Forgery (CSRF) vulnerability in PressTigers Simple Job Board plugin <= 2.10.3 versions.
CVE-2022-2558 1 Presstigers 1 Simple Job Board 2022-08-23 N/A 5.3 MEDIUM
The Simple Job Board WordPress plugin before 2.10.0 is susceptible to Directory Listing which allows the public listing of uploaded resumes in certain configurations.
CVE-2021-39328 1 Presstigers 1 Simple Job Board 2021-10-27 3.5 LOW 4.8 MEDIUM
The Simple Job Board WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $job_board_privacy_policy_label variable echo'd out via the ~/admin/settings/class-simple-job-board-settings-privacy.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 2.9.4. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled.
CVE-2017-18498 1 Presstigers 1 Simple Job Board 2019-08-15 4.3 MEDIUM 6.1 MEDIUM
The simple-job-board plugin before 2.4.4 for WordPress has reflected XSS via keyword search.