CVE-2020-8440: Simplejobscript

Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days.

controllers/page_apply.php in Simplejobscript.com SJS through 1.66 is prone to unauthenticated Remote Code Execution by uploading a PHP script as a resume.

Affected products

• Simplejobscript Simplejobscript: up to and including 1.66

Published 2020-01-31. Last modified 2026-06-17.