CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
What the vulnerability does
Improper Control of Generation of Code ('Code Injection') vulnerability in PickPlugins Job Board Manager job-board-manager allows Code Injection.This issue affects Job Board Manager: from n/a through <= 2.1.61.
Explanation of Vulnerability in Simple Terms
Job Board Manager versions up to 2.1.61 contain a code injection vulnerability that allows high-privilege users to inject and execute arbitrary code. An attacker with administrative access can modify job board settings or content to inject malicious code that executes on the site. This affects confidentiality and integrity but not availability.
What an attacker can do
Inject and execute arbitrary code on the site with administrative privileges.
Potential impact on your site
A compromised admin account could inject malicious code affecting site data and user information.
Conditions required to exploit
Attacker must have high-level administrative access to the site.
Key dates
External resources
Related vulnerabilities
