Skip to content
OpenAdvisories

Vendor

JoomSky

25 known vulnerabilities.

Products

JS Help Desk 10 JS Job Manager 10 JS Jobs 2 J2 JOBS 2 WP Vehicle Manager 1
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-57652

    WordPress JS Help Desk plugin <= 3.1.0 - Insecure Direct Object References (IDOR) vulnerability

    Unauthenticated Insecure Direct Object References (IDOR) in JS Help Desk <= 3.1.0 versions.

    JoomSky JS Help Desk
  • Medium 6.5
    CVE-2019-25740

    Joomla com_jsjobs 1.2.6 Arbitrary File Deletion

    Joomla com_jsjobs 1.2.6 contains an arbitrary file deletion vulnerability that allows authenticated attackers to delete files by manipulating custom userfield parameters. Attackers can send POST requests to the job.savejob task with path traversal sequences i…

    JoomSky JS Jobs
  • Medium 5.3
    CVE-2018-25327

    Joomla! Component Js Jobs 1.2.0 Cross-Site Request Forgery

    Joomla! Component Js Jobs 1.2.0 contains a cross-site request forgery vulnerability that allows attackers to perform state-changing actions without token validation. Attackers can craft malicious HTML forms targeting administrative endpoints like job.jobenfor…

    JoomSky JS Jobs
  • Medium 6.5
    CVE-2026-32535

    WordPress JS Help Desk plugin <= 3.0.3 - Insecure Direct Object References (IDOR) vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through <= 3.0.3.

    JoomSky JS Help Desk
  • Medium 6.5
    CVE-2025-58234

    WordPress JS Job Manager Plugin <= 2.0.2 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky JS Job Manager js-jobs allows Stored XSS.This issue affects JS Job Manager: from n/a through <= 2.0.2.

    JoomSky JS Job Manager
  • Medium 5.3
    CVE-2025-31868

    WordPress JS Job Manager plugin <= 2.0.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through <= 2.0.2.

    JoomSky JS Job Manager
  • Medium 5.4
    CVE-2025-31867

    WordPress JS Job Manager Plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through <= 2.0.2.

    JoomSky JS Job Manager
  • Medium 6.5
    CVE-2023-28689

    WordPress JS Job Manager plugin <= 2.0.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in JoomSky JS Job Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through 2.0.0.

    JoomSky JS Job Manager
  • Medium 5.9
    CVE-2024-51670

    WordPress JS Help Desk plugin <= 2.8.7 - Stored Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky JS Help Desk js-support-ticket allows Stored XSS.This issue affects JS Help Desk: from n/a through <= 2.8.7.

    JoomSky JS Help Desk
  • Medium 5.4
    CVE-2023-31087

    WordPress JS Job Manager Plugin <=2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in JoomSky JS Job Manager plugin <= 2.0.0 versions.

    JoomSky JS Job Manager
  • Medium 5.9
    CVE-2023-25963

    WordPress JS Job Manager Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in JoomSky JS Job Manager plugin <= 2.0.0 versions.

    JoomSky JS Job Manager