Basic Job Site Script Project Basic Job Site Script — known CVE vulnerabilities

Every CVE whose affected-product data names Basic Job Site Script Project Basic Job Site Script, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2017-17642 — CVSS 9.8 (critical): Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job.
• CVE-2017-17895 — CVSS 9.8 (critical): Readymade Job Site Script has SQL Injection via the location_name array parameter to the /job URI.
• CVE-2017-17894 — CVSS 8.8 (high): Readymade Job Site Script has CSRF via the /job URI.
• CVE-2017-17896 — CVSS 6.1 (medium): Readymade Job Site Script has XSS via the keyword parameter to the /job URI.