basic job site script project vulnerabilities

Products

• basic job site script 4

Latest basic job site script project CVEs

Newest publication first

1. CVE-2017-17896 Readymade Job Site Script has XSS via the keyword parameter to the /job URI.

   Published 2017-12-24

   Medium·CVSS 6.1

   Readymade Job Site Script has XSS via the keyword parameter to the /job URI.

2. CVE-2017-17895 Readymade Job Site Script has SQL Injection via the location_name array parameter to the /job URI.

   Published 2017-12-24

   Critical·CVSS 9.8

   Readymade Job Site Script has SQL Injection via the location_name array parameter to the /job URI.

3. CVE-2017-17894 Readymade Job Site Script has CSRF via the /job URI.

   Published 2017-12-24

   High·CVSS 8.8

   Readymade Job Site Script has CSRF via the /job URI.

4. CVE-2017-17642 Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job.

   Published 2017-12-13

   Critical·CVSS 9.8 EPSS 2.2%

   Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.