Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-6585

JobSearch WP Job Board < 2.3.4 - Arbitrary File Upload to RCE

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The WP JobSearch WordPress plugin before 2.3.4 does not validate files to be uploaded, which could allow unauthenticated attackers to upload arbitrary files such as PHP on the server

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown WP JobSearch

Default version status: unaffected

  • 0 to < 2.3.4affected

References