CVE-2023-3855

A vulnerability classified as problematic was found in phpscriptpoint JobSeeker 1.5. Affected by this vulnerability is an unknown functionality of the file /search-result.php. The manipulation of the argument kw/lc/ct/cp/p leads to cross site scripting. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-235207. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-79

• https://vuldb.com/?ctiid.235207Permissions Required, Third Party Advisory
• https://vuldb.com/?id.235207Permissions Required, Third Party Advisory
• https://vuldb.com/?ctiid.235207Permissions Required, Third Party Advisory
• https://vuldb.com/?id.235207Permissions Required, Third Party Advisory

Published

Jul 24, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-38544A logged in user can modify specific files that may lead to …5.5
• CVE-2023-38545This flaw makes curl overflow a heap based buffer in the SOC…9.8
• CVE-2023-38546This flaw allows an attacker to insert cookies at will into …3.7
• CVE-2023-38547A vulnerability in Veeam ONE allows an unauthenticated user …9.8
• CVE-2023-38548A vulnerability in Veeam ONE allows an unprivileged user who…4.3
• CVE-2023-38549A vulnerability in Veeam ONE allows an unprivileged user who…5.4
• CVE-2023-38551A CRLF Injection vulnerability in Ivanti Connect Secure (9.x…8.2
• CVE-2023-38552When the Node.js policy feature checks the integrity of a re…7.5
• CVE-2023-38553In gnss service, there is a possible out of bounds write due…6.7
• CVE-2023-38554In wcn bsp driver, there is a possible out of bounds write d…5.5
• CVE-2023-38555Authentication bypass vulnerability in Fujitsu network devic…8.8
• CVE-2023-38556Improper input validation vulnerability in SEIKO EPSON print…7.5