Description
A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.2 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'fieldfor' parameter in the GDPR Field feature.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| joomsky.com | JS Jobs component for Joomla | 1.1.5-1.4.2 | — |
Advisories 1
- WID-SEC-2025-0431 Joomla: Mehrere Schwachstellen ermöglichen Manipulation von Dateien BSI CERT-Bund (WID) · Feb 24, 2025
References
- https://joomsky.com/js-jobs-joomla/ product
- https://decrypt.locker/obtaining-my-first-cve/ third-party-advisory