WordPress Simple Job Board <2.9.4 - Local File Inclusion
WordPress Simple Job Board prior to version 2.9.4 is vulnerable to arbitrary file retrieval vulnerabilities because it does not validate the sjb_file parameter when viewing a resume, allowing an authenticated user with the download_resume capability (such as HR users) to download arbitrary files from the web-server via local file inclusion.
simple_board_jobPoC 已收录
CVSS7.7EPSS 76.8%