CVE-2022-1167

MEDIO 6.1CVE-2022-1167 · Published 04/04/2022 · updated 17/06/2026

In breve

CVE-2022-1167 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda careerup (apusthemes).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.1%, superiore al 66.3% delle vulnerabilità.
Correzione: aggiornare a 2.3.1 o successiva.

Package	Affected versions	Patched versions
careerup apusthemes	`< 2.3.1`	`2.3.1`

Description

There are unauthenticated reflected Cross-Site Scripting (XSS) vulnerabilities in CareerUp Careerup WordPress theme before 2.3.1, via the filter parameters.

References

m0ze.ru/vulnerability/%5B2020-06-17%5D-%5BWordPress%5D-%5BCWE-79%5D-CareerUp-WordPress-Theme-v2.3.0.txt
themeforest.net/item/careerup-job-board-wordpress-theme/24002090 · Product
wpscan.com/vulnerability/a30a1430-c474-4cd1-877c-35c4ab624170 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free