Vulnerabilities > CVE-2023-51545 - Deserialization of Untrusted Data vulnerability in Themehigh JOB Manager & Career

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

themehigh

CWE-502

NVD

Published: 2023-12-29

Updated: 2024-01-05

Summary

Cross-Site Request Forgery (CSRF), Deserialization of Untrusted Data vulnerability in ThemeHigh Job Manager & Career – Manage job board listings, and recruitments.This issue affects Job Manager & Career – Manage job board listings, and recruitments: from n/a through 1.4.4.

Vulnerable Configurations

Part	Description	Count
Application	Themehigh Themehigh JOB Manager & Career 1.0.0 Themehigh JOB Manager & Career 1.0.1 Themehigh JOB Manager & Career 1.0.2 Themehigh JOB Manager & Career 1.1.0 Themehigh JOB Manager & Career 1.1.1 Themehigh JOB Manager & Career 1.2.0 Themehigh JOB Manager & Career 1.2.1 Themehigh JOB Manager & Career 1.2.2 Themehigh JOB Manager & Career 1.2.3 Themehigh JOB Manager & Career 1.2.4 Themehigh JOB Manager & Career 1.3.0 Themehigh JOB Manager & Career 1.4.0 Themehigh JOB Manager & Career 1.4.1 Themehigh JOB Manager & Career 1.4.2 Themehigh JOB Manager & Career 1.4.3	15

Common Weakness Enumeration (CWE)

CWE-502 - Deserialization of Untrusted Data

References

https://patchstack.com/database/vulnerability/job-manager-career/wordpress-job-manager-career-plugin-1-4-4-cross-site-request-forgery-csrf-to-php-object-injection-vulnerability?_s_id=cve