Vulnerability Details CVE-2021-39328
The Simple Job Board WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $job_board_privacy_policy_label variable echo'd out via the ~/admin/settings/class-simple-job-board-settings-privacy.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 2.9.4. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 62.5%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 3.5
Products affected by CVE-2021-39328
-
cpe:2.3:a:presstigers:simple_job_board:-
-
cpe:2.3:a:presstigers:simple_job_board:2.2.1
-
cpe:2.3:a:presstigers:simple_job_board:2.2.2
-
cpe:2.3:a:presstigers:simple_job_board:2.2.3
-
cpe:2.3:a:presstigers:simple_job_board:2.2.4
-
cpe:2.3:a:presstigers:simple_job_board:2.3.0
-
cpe:2.3:a:presstigers:simple_job_board:2.3.1
-
cpe:2.3:a:presstigers:simple_job_board:2.3.2
-
cpe:2.3:a:presstigers:simple_job_board:2.4.0
-
cpe:2.3:a:presstigers:simple_job_board:2.4.1
-
cpe:2.3:a:presstigers:simple_job_board:2.4.2
-
cpe:2.3:a:presstigers:simple_job_board:2.4.3
-
cpe:2.3:a:presstigers:simple_job_board:2.4.4
-
cpe:2.3:a:presstigers:simple_job_board:2.4.5
-
cpe:2.3:a:presstigers:simple_job_board:2.4.6
-
cpe:2.3:a:presstigers:simple_job_board:2.5.0
-
cpe:2.3:a:presstigers:simple_job_board:2.6.0
-
cpe:2.3:a:presstigers:simple_job_board:2.7.0
-
cpe:2.3:a:presstigers:simple_job_board:2.7.1
-
cpe:2.3:a:presstigers:simple_job_board:2.7.2
-
cpe:2.3:a:presstigers:simple_job_board:2.7.3
-
cpe:2.3:a:presstigers:simple_job_board:2.7.4
-
cpe:2.3:a:presstigers:simple_job_board:2.8.0
-
cpe:2.3:a:presstigers:simple_job_board:2.8.1
-
cpe:2.3:a:presstigers:simple_job_board:2.8.3
-
cpe:2.3:a:presstigers:simple_job_board:2.9.0
-
cpe:2.3:a:presstigers:simple_job_board:2.9.1
-
cpe:2.3:a:presstigers:simple_job_board:2.9.2
-
cpe:2.3:a:presstigers:simple_job_board:2.9.3
-
cpe:2.3:a:presstigers:simple_job_board:2.9.4