CVE-2023-6585 — JobSearch WP Job Board < 2.3.4 - Arbitrary File Upload to RCE

CVE-2023-6585

JobSearch WP Job Board < 2.3.4 - Arbitrary File Upload to RCE PUBLISHED

Description (CNA)

The WP JobSearch WordPress plugin before 2.3.4 does not validate files to be uploaded, which could allow unauthenticated attackers to upload arbitrary files such as PHP on the server

Affected (CNA)

Vendor / product	Versions
Unknown / WP JobSearch	affected 0 before 2.3.4

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/757412f4-e4f8-4007-8e3b-639a72b33180/

ADP enrichment

CVE

No English description supplied.

https://wpscan.com/vulnerability/757412f4-e4f8-4007-8e3b-639a72b33180/

CISA-ADP

No English description supplied.

No references supplied.