PT-2018-17092
CVE-2018-5695
·
تاريخ النشر
2018-01-14
·
تاريخ التحديث
2018-02-01
الوصف من
CVSS 3.1
7.2
عاليةالمقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
WpJobBoard plugin version 4.4.4
Description:
The issue allows SQL injection via the
order or sort parameter to the "wpjb-job" or "wpjb-alerts" module, with a request to "wp-admin/admin.php".Recommendations:
For WpJobBoard plugin version 4.4.4, consider restricting access to the "wpjb-job" and "wpjb-alerts" modules until a patch is available. Avoid using the
order and sort parameters in the affected API endpoint until the issue is resolved. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾