CVE-2022-2558 Simple Job Board < 2.10.0 - Resume Disclosure via Directory Listing
Attackers can view uploaded resumes via directory listing in specific configurations of the Simple Job Board WordPress plugin.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-2558?
CVE-2022-2558 is a medium-severity vulnerability in Unknown Simple Job Board, published on 22 Aug 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Simple Job Board WordPress plugin before 2.10.0 is susceptible to Directory Listing which allows the public listing of uploaded resumes in certain configurations.
Weakness: CWE-200
Which versions are affected by CVE-2022-2558?
It affects 1 product.
Products include Presstigers Simple Job Board.
How do I fix CVE-2022-2558?
No fix has been published for CVE-2022-2558 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-2558 being exploited?
There is no known exploitation of CVE-2022-2558 in the wild and no public exploit code.
Other vulnerabilities in Unknown Simple Job Board
- CVE-2024-1813 Simple Job Board <= 2.11.0 - Unauthenticated PHP Object Injection via Job Application Fields
- CVE-2024-7351 Simple Job Board <= 2.12.3 - Authenticated (Editor+) PHP Object Injection
- CVE-2024-7761 Simple Job Board < 2.12.2 - Admin+ Stored XSS
- CVE-2017-18498 Cross-site scripting in n/a
- CVE-2021-39328 Simple Job Board <= 2.9.4 Authenticated Stored Cross-Site Scripting
Sources
Also known as GHSA-p8xc-8xwv-2wj7.