Medium · 4.7 CVE-2025-22208 EUVD-2025-2668GHSA-6j8j-86h8-528v

Extension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.3 for Joomla

Published Feb 15, 2025 · Updated Feb 21, 2025 · Assigned by Joomla

Vendor: joomsky.com Product: JS Jobs component for Joomla Category: Web / CMS

Description

A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'filter_email' parameter in the GDPR Erase Data Request search feature.

Affected products

Vendor	Product	Affected	Fixed
joomsky.com	JS Jobs component for Joomla	1.1.5-1.4.3	—

Advisories 1

WID-SEC-2025-0431 Joomla: Mehrere Schwachstellen ermöglichen Manipulation von Dateien BSI CERT-Bund (WID) · Feb 24, 2025

References

https://joomsky.com/js-jobs-joomla/ product
https://github.com/AdamWallwork/CVEs/tree/main/2025/CVE-2025-22208 third-party-advisory