CVE-2022-1167

MEDIO 6.1CVE-2022-1167 · Published 04/04/2022 · updated 17/06/2026

En resumen

CVE-2022-1167 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a careerup (apusthemes).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.1%, mayor que el 66.3% de las vulnerabilidades.
Solución: actualizar a 2.3.1 o posterior.

Package	Affected versions	Patched versions
careerup apusthemes	`< 2.3.1`	`2.3.1`

Description

There are unauthenticated reflected Cross-Site Scripting (XSS) vulnerabilities in CareerUp Careerup WordPress theme before 2.3.1, via the filter parameters.

References

m0ze.ru/vulnerability/%5B2020-06-17%5D-%5BWordPress%5D-%5BCWE-79%5D-CareerUp-WordPress-Theme-v2.3.0.txt
themeforest.net/item/careerup-job-board-wordpress-theme/24002090 · Product
wpscan.com/vulnerability/a30a1430-c474-4cd1-877c-35c4ab624170 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free