CVE-2023-3855

Summary

CVE-2023-3855 is a newly identified vulnerability affecting the phpscriptpoint JobSeeker 1.5 software. This issue lies within an unknown functionality of the /search-result.php file. By manipulating the kw/lc/ct/cp/p argument, attackers can inject cross-site scripting code, posing a significant security risk. The vulnerability can be exploited remotely, increasing its potential impact. Despite early disclosure, the vendor has yet to respond to reports about this weakness, identified as VDB-235207.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.