Description
Joomla! Component Js Jobs 1.2.0 contains a cross-site request forgery vulnerability that allows attackers to perform state-changing actions without token validation. Attackers can craft malicious HTML forms targeting administrative endpoints like job.jobenforcedelete to delete job entries or modify component settings when administrators visit attacker-controlled pages.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Joomsky | JS Jobs | 1.2.0 | — |
References
- ExploitDB-44492 exploit
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: Joomla! Component Js Jobs 1.2.0 Cross-Site Request Forgery third-party-advisory