Vendor CVEs

Joomsky

All CVEs

40 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2018-6006	Joomsky Js Autoz	Cri	0.68	9.8	0.19	Feb 17, 2018	SQL Injection exists in the JS Autoz 1.0.9 component for Joomla! via the vtype, pre, or prs parameter.
CVE-2018-5994	Joomla Js Jobs	Cri	0.67	9.8	0.03	Feb 17, 2018	SQL Injection exists in the JS Jobs 1.1.9 component for Joomla! via the zipcode parameter in a newest-jobs request, or the ta parameter in a view_resume request.
CVE-2025-32660	Joomsky Js Job Manager	Cri	0.65	10.0	0.00	Apr 17, 2025	Unrestricted Upload of File with Dangerous Type vulnerability in JoomSky JS Job Manager js-jobs allows Upload a Web Shell to a Web Server.This issue affects JS Job Manager: from n/a through <= 2.0.2.
CVE-2022-46839	Joomsky Js Help Desk	Cri	0.65	10.0	0.01	Jan 5, 2024	Unrestricted Upload of File with Dangerous Type vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1.
CVE-2019-17527	JS JOBS FREE JS JOBS FREE	Cri	0.64	9.8	0.01	Dec 19, 2019	dataForDepandantField in models/custormfields.php in the JS JOBS FREE extension before 1.2.7 for Joomla! allows SQL Injection via the index.php?option=com_jsjobs&task=customfields.getfieldtitlebyfieldandfieldfo child parameter.
CVE-2023-50839	Joomsky Js Help Desk	Cri	0.61	9.3	0.02	Dec 28, 2023	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.1.
CVE-2025-32626	Joomsky Js Job Manager	Cri	0.60	9.3	0.00	Apr 17, 2025	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Job Manager js-jobs allows SQL Injection.This issue affects JS Job Manager: from n/a through <= 2.0.2.
CVE-2025-30886	Joomsky Js Help Desk	Cri	0.60	9.3	0.01	Apr 1, 2025	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help Desk js-support-ticket allows SQL Injection.This issue affects JS Help Desk: from n/a through <= 2.9.2.
CVE-2018-6007	Joomla Joomla!	Hig	0.60	8.8	0.02	Jan 29, 2018	CSRF exists in the JS Support Ticket 1.1.0 component for Joomla! and allows attackers to inject HTML or edit a ticket.
CVE-2022-46838	Joomsky Js Help Desk	Cri	0.59	9.1	0.01	Dec 13, 2024	Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1.
CVE-2023-25444	Joomsky Js Help Desk	Cri	0.59	9.1	0.01	May 17, 2024	Unrestricted Upload of File with Dangerous Type vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Using Malicious Files.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.7.
CVE-2025-32146	Joomsky Js Job Manager	Hig	0.57	8.8	0.01	Apr 4, 2025	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Job Manager js-jobs allows PHP Local File Inclusion.This issue affects JS Job Manager: from n/a through <= 2.0.2.
CVE-2018-21002	WordPress Js Support Ticket	Hig	0.57	8.8	0.01	Aug 27, 2019	The js-support-ticket plugin before 2.0.6 for WordPress has CSRF.
CVE-2018-20974	WordPress Js Jobs	Hig	0.57	8.8	0.01	Aug 16, 2019	The js-jobs plugin before 1.0.7 for WordPress has CSRF.
CVE-2025-30878	Joomsky Js Help Desk	Hig	0.56	8.6	0.01	Apr 1, 2025	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Help Desk js-support-ticket allows Path Traversal.This issue affects JS Help Desk: from n/a through <= 2.9.2.
CVE-2022-47151	Joomsky Js Help Desk	Hig	0.56	8.6	0.00	Apr 17, 2024	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1.
CVE-2026-24959	Joomsky Js Help Desk	Hig	0.55	8.5	0.00	Feb 20, 2026	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help Desk js-support-ticket allows Blind SQL Injection.This issue affects JS Help Desk: from n/a through <= 3.0.1.
CVE-2025-32627	Joomsky Js Job Manager	Hig	0.53	8.1	0.01	Apr 11, 2025	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Job Manager js-jobs allows PHP Local File Inclusion.This issue affects JS Job Manager: from n/a through <= 2.0.2.
CVE-2025-30901	Joomsky Js Help Desk	Hig	0.53	8.1	0.01	Apr 1, 2025	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Help Desk js-support-ticket allows PHP Local File Inclusion.This issue affects JS Help Desk: from n/a through <= 2.9.2.
CVE-2025-30882	Joomsky Js Help Desk	Hig	0.49	7.5	0.01	Apr 1, 2025	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Help Desk js-support-ticket allows Path Traversal.This issue affects JS Help Desk: from n/a through <= 2.9.1.
CVE-2025-30880	Joomsky Js Help Desk	Hig	0.49	7.5	0.00	Apr 1, 2025	Missing Authorization vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through <= 2.9.2.
CVE-2024-13606	WordPress Js Help Desk	Hig	0.49	7.5	0.00	Feb 13, 2025	The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.8 via the 'jssupportticketdata' directory. This makes it possible for unauthenticated attackers to extract…
CVE-2020-37226	Joomla J2 JOBS	Hig	0.46	7.1	0.00	May 13, 2026	Joomla J2 JOBS 1.3.0 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'sortby' parameter. Attackers can send POST requests to the administrator index with malicious 'sortby'…
CVE-2026-32535	Joomsky Js Help Desk	Med	0.42	6.5	0.00	Mar 25, 2026	Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through <= 3.0.3.
CVE-2025-58234	Joomsky Js Job Manager	Med	0.42	6.5	0.00	Sep 22, 2025	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky JS Job Manager js-jobs allows Stored XSS.This issue affects JS Job Manager: from n/a through <= 2.0.2.
CVE-2023-28689	Joomsky Js Job Manager	Med	0.42	6.5	0.00	Dec 9, 2024	Missing Authorization vulnerability in JoomSky JS Job Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through 2.0.0.
CVE-2024-51670	Joomsky Js Help Desk	Med	0.38	5.9	0.00	Nov 9, 2024	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky JS Help Desk js-support-ticket allows Stored XSS.This issue affects JS Help Desk: from n/a through <= 2.8.7.
CVE-2024-43274	Joomsky Js Help Desk	Med	0.38	5.8	0.00	Nov 1, 2024	Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.6.
CVE-2023-25963	Joomsky Js Job Manager	Med	0.38	5.9	0.00	Jun 16, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in JoomSky JS Job Manager plugin <= 2.0.0 versions.
CVE-2018-9183	Joomsky Js Jobs	Med	0.38	5.4	0.02	Apr 2, 2018	The Joom Sky JS Jobs extension before 1.2.1 for Joomla! has XSS.
CVE-2025-31867	Joomsky Js Job Manager	Med	0.35	5.4	0.00	Apr 1, 2025	Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through <= 2.0.2.
CVE-2022-46840	Joomsky Js Help Desk	Med	0.35	5.4	0.00	Dec 13, 2024	Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1.
CVE-2023-31087	Joomsky Js Job Manager	Med	0.35	5.4	0.00	Nov 9, 2023	Cross-Site Request Forgery (CSRF) vulnerability in JoomSky JS Job Manager plugin <= 2.0.0 versions.
CVE-2022-46842	Joomsky Js Help Desk	Med	0.35	5.4	0.00	Feb 2, 2023	Cross-Site Request Forgery (CSRF) vulnerability in JS Help Desk plugin <= 2.7.1 versions.
CVE-2025-31868	Joomsky Js Job Manager	Med	0.34	5.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through <= 2.0.2.
CVE-2024-31273	Joomsky Js Help Desk	Med	0.34	5.3	0.00	Jun 9, 2024	Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.3.
CVE-2025-22209	Joomla Js Jobs	Med	0.31	4.7	0.00	Feb 15, 2025	A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'searchpaymentstatus' parameter in the Employer Payment History search feature.
CVE-2025-22208	Joomla Js Jobs	Med	0.31	4.7	0.01	Feb 15, 2025	A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'filter_email' parameter in the GDPR Erase Data Request search feature.
CVE-2025-22206	Joomla Js Jobs	Med	0.31	4.7	0.09	Feb 4, 2025	A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.2 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'fieldfor' parameter in the GDPR Field feature.
CVE-2009-4599	Joomla Js Jobs		0.03	—	0.02	Jan 12, 2010	Multiple SQL injection vulnerabilities in the JS Jobs (com_jsjobs) component 1.0.5.6 for Joomla! allow remote attackers to execute arbitrary SQL commands via (1) the md parameter in an employer view_company action to index.php or (2) the oi parameter in an employer view_job…

CVE-2018-6006CriFeb 17, 2018
Joomsky
Js Autoz
risk 0.68cvss 9.8epss 0.19
SQL Injection exists in the JS Autoz 1.0.9 component for Joomla! via the vtype, pre, or prs parameter.
CVE-2018-5994CriFeb 17, 2018
Joomla
Js Jobs
risk 0.67cvss 9.8epss 0.03
SQL Injection exists in the JS Jobs 1.1.9 component for Joomla! via the zipcode parameter in a newest-jobs request, or the ta parameter in a view_resume request.
CVE-2025-32660CriApr 17, 2025
Joomsky
Js Job Manager
risk 0.65cvss 10.0epss 0.00
Unrestricted Upload of File with Dangerous Type vulnerability in JoomSky JS Job Manager js-jobs allows Upload a Web Shell to a Web Server.This issue affects JS Job Manager: from n/a through <= 2.0.2.
CVE-2022-46839CriJan 5, 2024
Joomsky
Js Help Desk
risk 0.65cvss 10.0epss 0.01
Unrestricted Upload of File with Dangerous Type vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1.
CVE-2019-17527CriDec 19, 2019
JS JOBS FREE
JS JOBS FREE
risk 0.64cvss 9.8epss 0.01
dataForDepandantField in models/custormfields.php in the JS JOBS FREE extension before 1.2.7 for Joomla! allows SQL Injection via the index.php?option=com_jsjobs&task=customfields.getfieldtitlebyfieldandfieldfo child parameter.
CVE-2023-50839CriDec 28, 2023
Joomsky
Js Help Desk
risk 0.61cvss 9.3epss 0.02
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.1.
CVE-2025-32626CriApr 17, 2025
Joomsky
Js Job Manager
risk 0.60cvss 9.3epss 0.00
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Job Manager js-jobs allows SQL Injection.This issue affects JS Job Manager: from n/a through <= 2.0.2.
CVE-2025-30886CriApr 1, 2025
Joomsky
Js Help Desk
risk 0.60cvss 9.3epss 0.01
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help Desk js-support-ticket allows SQL Injection.This issue affects JS Help Desk: from n/a through <= 2.9.2.
CVE-2018-6007HigJan 29, 2018
Joomla
Joomla!
risk 0.60cvss 8.8epss 0.02
CSRF exists in the JS Support Ticket 1.1.0 component for Joomla! and allows attackers to inject HTML or edit a ticket.
CVE-2022-46838CriDec 13, 2024
Joomsky
Js Help Desk
risk 0.59cvss 9.1epss 0.01
Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1.
CVE-2023-25444CriMay 17, 2024
Joomsky
Js Help Desk
risk 0.59cvss 9.1epss 0.01
Unrestricted Upload of File with Dangerous Type vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Using Malicious Files.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.7.
CVE-2025-32146HigApr 4, 2025
Joomsky
Js Job Manager
risk 0.57cvss 8.8epss 0.01
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Job Manager js-jobs allows PHP Local File Inclusion.This issue affects JS Job Manager: from n/a through <= 2.0.2.
CVE-2018-21002HigAug 27, 2019
WordPress
Js Support Ticket
risk 0.57cvss 8.8epss 0.01
The js-support-ticket plugin before 2.0.6 for WordPress has CSRF.
CVE-2018-20974HigAug 16, 2019
WordPress
Js Jobs
risk 0.57cvss 8.8epss 0.01
The js-jobs plugin before 1.0.7 for WordPress has CSRF.
CVE-2025-30878HigApr 1, 2025
Joomsky
Js Help Desk
risk 0.56cvss 8.6epss 0.01
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Help Desk js-support-ticket allows Path Traversal.This issue affects JS Help Desk: from n/a through <= 2.9.2.
CVE-2022-47151HigApr 17, 2024
Joomsky
Js Help Desk
risk 0.56cvss 8.6epss 0.00
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1.
CVE-2026-24959HigFeb 20, 2026
Joomsky
Js Help Desk
risk 0.55cvss 8.5epss 0.00
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help Desk js-support-ticket allows Blind SQL Injection.This issue affects JS Help Desk: from n/a through <= 3.0.1.
CVE-2025-32627HigApr 11, 2025
Joomsky
Js Job Manager
risk 0.53cvss 8.1epss 0.01
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Job Manager js-jobs allows PHP Local File Inclusion.This issue affects JS Job Manager: from n/a through <= 2.0.2.
CVE-2025-30901HigApr 1, 2025
Joomsky
Js Help Desk
risk 0.53cvss 8.1epss 0.01
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Help Desk js-support-ticket allows PHP Local File Inclusion.This issue affects JS Help Desk: from n/a through <= 2.9.2.
CVE-2025-30882HigApr 1, 2025
Joomsky
Js Help Desk
risk 0.49cvss 7.5epss 0.01
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Help Desk js-support-ticket allows Path Traversal.This issue affects JS Help Desk: from n/a through <= 2.9.1.
CVE-2025-30880HigApr 1, 2025
Joomsky
Js Help Desk
risk 0.49cvss 7.5epss 0.00
Missing Authorization vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through <= 2.9.2.
CVE-2024-13606HigFeb 13, 2025
WordPress
Js Help Desk
risk 0.49cvss 7.5epss 0.00
The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.8 via the 'jssupportticketdata' directory. This makes it possible for unauthenticated attackers to extract…
CVE-2020-37226HigMay 13, 2026
Joomla
J2 JOBS
risk 0.46cvss 7.1epss 0.00
Joomla J2 JOBS 1.3.0 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'sortby' parameter. Attackers can send POST requests to the administrator index with malicious 'sortby'…
CVE-2026-32535MedMar 25, 2026
Joomsky
Js Help Desk
risk 0.42cvss 6.5epss 0.00
Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through <= 3.0.3.
CVE-2025-58234MedSep 22, 2025
Joomsky
Js Job Manager
risk 0.42cvss 6.5epss 0.00
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky JS Job Manager js-jobs allows Stored XSS.This issue affects JS Job Manager: from n/a through <= 2.0.2.
CVE-2023-28689MedDec 9, 2024
Joomsky
Js Job Manager
risk 0.42cvss 6.5epss 0.00
Missing Authorization vulnerability in JoomSky JS Job Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through 2.0.0.
CVE-2024-51670MedNov 9, 2024
Joomsky
Js Help Desk
risk 0.38cvss 5.9epss 0.00
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky JS Help Desk js-support-ticket allows Stored XSS.This issue affects JS Help Desk: from n/a through <= 2.8.7.
CVE-2024-43274MedNov 1, 2024
Joomsky
Js Help Desk
risk 0.38cvss 5.8epss 0.00
Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.6.
CVE-2023-25963MedJun 16, 2023
Joomsky
Js Job Manager
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in JoomSky JS Job Manager plugin <= 2.0.0 versions.
CVE-2018-9183MedApr 2, 2018
Joomsky
Js Jobs
risk 0.38cvss 5.4epss 0.02
The Joom Sky JS Jobs extension before 1.2.1 for Joomla! has XSS.
CVE-2025-31867MedApr 1, 2025
Joomsky
Js Job Manager
risk 0.35cvss 5.4epss 0.00
Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through <= 2.0.2.
CVE-2022-46840MedDec 13, 2024
Joomsky
Js Help Desk
risk 0.35cvss 5.4epss 0.00
Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1.
CVE-2023-31087MedNov 9, 2023
Joomsky
Js Job Manager
risk 0.35cvss 5.4epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in JoomSky JS Job Manager plugin <= 2.0.0 versions.
CVE-2022-46842MedFeb 2, 2023
Joomsky
Js Help Desk
risk 0.35cvss 5.4epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in JS Help Desk plugin <= 2.7.1 versions.
CVE-2025-31868MedApr 1, 2025
Joomsky
Js Job Manager
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through <= 2.0.2.
CVE-2024-31273MedJun 9, 2024
Joomsky
Js Help Desk
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.3.
CVE-2025-22209MedFeb 15, 2025
Joomla
Js Jobs
risk 0.31cvss 4.7epss 0.00
A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'searchpaymentstatus' parameter in the Employer Payment History search feature.
CVE-2025-22208MedFeb 15, 2025
Joomla
Js Jobs
risk 0.31cvss 4.7epss 0.01
A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'filter_email' parameter in the GDPR Erase Data Request search feature.
CVE-2025-22206MedFeb 4, 2025
Joomla
Js Jobs
risk 0.31cvss 4.7epss 0.09
A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.2 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'fieldfor' parameter in the GDPR Field feature.
CVE-2009-4599Jan 12, 2010
Joomla
Js Jobs
risk 0.03cvss —epss 0.02
Multiple SQL injection vulnerabilities in the JS Jobs (com_jsjobs) component 1.0.5.6 for Joomla! allow remote attackers to execute arbitrary SQL commands via (1) the md parameter in an employer view_company action to index.php or (2) the oi parameter in an employer view_job…