title: JobBoardWP < 1.2.2 - Unauthenticated Arbitrary File Upload
description: The JobBoardWP WordPress plugin before 1.2.2 does not properly validate file names and types in its file upload functionalities, allowing unauthenticated users to upload arbitrary files such as PHP.
problem types: CWE-434 Unrestricted Upload of File with Dangerous Type
affected:
{
vendor: Unknown
product: JobBoardWP
collectionURL: https://wordpress.org/plugins
versions:
status: affected, versionType: custom, version: 0, lessThan: 1.2.2
defaultStatus: unaffected
}