Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Priority LOW 25

A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'filter_email' parameter in the GDPR Erase Data…

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.00654 Published 2025-02-15 No fix listed CWE-89
Priority LOW 23

A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'searchpaymentstatus' parameter in the Employer…

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.00297 Published 2025-02-15 No fix listed CWE-89
Priority LOW 36

A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.2 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'fieldfor' parameter in the GDPR Field feature.

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.09499 Published 2025-02-04 No fix listed CWE-89
Priority MEDIUM 44

dataForDepandantField in models/custormfields.php in the JS JOBS FREE extension before 1.2.7 for Joomla! allows SQL Injection via the index.php?option=com_jsjobs&task=customfields.getfieldtitlebyfieldandfieldfo child par…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01034 Published 2019-12-19 No fix listed CWE-89