CVE-2023-6585

CWE-434 — Unrestricted File Upload3 documents3 sources
Severity
7.5HIGH
EPSS
0.5%
top 33.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Unknown WP JobsearchEyecix Jobsearch WP JOB Board
Timeline
PublishedFeb 27

Description

The WP JobSearch WordPress plugin before 2.3.4 does not validate files to be uploaded, which could allow unauthenticated attackers to upload arbitrary files such as PHP on the server

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5unknown/wp_jobsearch< 2.3.4

🔴Vulnerability Details

2
CVEList
JobSearch WP Job Board < 2.3.4 - Arbitrary File Upload to RCE↗2024-02-27
▶
GHSA
GHSA-q25f-2gjj-7ppp: The WP JobSearch WordPress plugin before 2↗2024-02-27
▶
CVE-2023-6585 (HIGH CVSS 7.5) | The WP JobSearch WordPress plugin b | cvebase.io