JoomSky

Records42All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high18CVSS 7.0–8.9

Exploited now

JoomSky records in CISA KEV

No JoomSky vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Js Help Desk 12 records MEDIUM Js Job Manager 11 records MEDIUM Js Jobs 6 records MEDIUM Js Autoz 1 record MEDIUM Js Support Ticket 1 record MEDIUM

Records

6 records in Js Jobs · all components

TI-2018-04363 CVE-2018-5994 · GHSA-2gmf-jvqr-r553

SQL Injection exists in the JS Jobs 1.1.9 component for Joomla! via the zipcode parameter…

MEDIUM 47

SQL Injection exists in the JS Jobs 1.1.9 component for Joomla! via the zipcode parameter in a newest-jobs request, or the ta parameter in a view_resume request.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02652 Published 2018-02-17 No fix listed CWE-89

TI-2019-13071 CVE-2019-17527 · GHSA-fvjv-32c8-j6x2

dataForDepandantField in models/custormfields.php in the JS JOBS FREE extension before…

MEDIUM 44

dataForDepandantField in models/custormfields.php in the JS JOBS FREE extension before 1.2.7 for Joomla! allows SQL Injection via the index.php?option=com_jsjobs&task=customfields.getfieldtitlebyfieldandfieldfo child par…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01034 Published 2019-12-19 No fix listed CWE-89

TI-2025-16117 CVE-2025-22206 · GHSA-3php-q6vg-pfpc

Extension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.2 for Joomla

LOW 36

A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.2 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'fieldfor' parameter in the GDPR Field feature.

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.09499 Published 2025-02-04 No fix listed CWE-89

TI-2018-06670 CVE-2018-9183 · GHSA-m78g-px4w-9x3m

The Joom Sky JS Jobs extension before 1.2.1 for Joomla! has XSS.

LOW 29

The Joom Sky JS Jobs extension before 1.2.1 for Joomla! has XSS.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.02189 Published 2018-04-02 No fix listed CWE-79

TI-2025-16119 CVE-2025-22208 · GHSA-6j8j-86h8-528v

Extension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.3 for Joomla

LOW 25

A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'filter_email' parameter in the GDPR Erase Data…

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.00654 Published 2025-02-15 No fix listed CWE-89

TI-2025-16120 CVE-2025-22209 · GHSA-9v7f-8fcp-rxqx

Extension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.3 for Joomla

LOW 23

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.00297 Published 2025-02-15 No fix listed CWE-89

Open these records in search →