Career Section vulnerabilities
2 known vulnerabilities in Career Section from Shahinurislam. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest first
- 9.8 Critical severity
Career Section: Unrestricted Upload of File with Dangerous Type
The Career Section plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7 via the CV upload handler. This is due to missing file type validation. This makes it possible for unauthenticated attackers to upload file
- 8.8 High severity
Career Section: Improper Limitation of a Pathname to a Restricted Directory
The Career Section plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Path Traversal and Arbitrary File Deletion in all versions up to, and including, 1.6. This is due to missing nonce validation and insufficient file path validation o