Vulnerability Description
The WP JobSearch WordPress plugin before 2.3.4 does not validate files to be uploaded, which could allow unauthenticated attackers to upload arbitrary files such as PHP on the server
CVSS Score
7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Eyecix | Jobsearch Wp Job Board | < 2.3.4 |
References
- https://wpscan.com/vulnerability/757412f4-e4f8-4007-8e3b-639a72b33180/ExploitThird Party Advisory
- https://wpscan.com/vulnerability/757412f4-e4f8-4007-8e3b-639a72b33180/ExploitThird Party Advisory
FAQ
What is CVE-2023-6585?
CVE-2023-6585 is a vulnerability with a CVSS score of 7.5 (HIGH). The WP JobSearch WordPress plugin before 2.3.4 does not validate files to be uploaded, which could allow unauthenticated attackers to upload arbitrary files such as PHP on the server
How severe is CVE-2023-6585?
CVE-2023-6585 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-6585?
Check the references section above for vendor advisories and patch information. Affected products include: Eyecix Jobsearch Wp Job Board.