Medium · 4.7 CVE-2025-22209 EUVD-2025-2669GHSA-9v7f-8fcp-rxqx

Extension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.3 for Joomla

Published Feb 15, 2025 · Updated Feb 21, 2025 · Assigned by Joomla

Vendor: joomsky.com Product: JS Jobs component for Joomla Category: Web / CMS

Description

A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'searchpaymentstatus' parameter in the Employer Payment History search feature.

Affected products

Vendor	Product	Affected	Fixed
joomsky.com	JS Jobs component for Joomla	1.1.5-1.4.3	—

Advisories 1

WID-SEC-2025-0431 Joomla: Mehrere Schwachstellen ermöglichen Manipulation von Dateien BSI CERT-Bund (WID) · Feb 24, 2025

References

https://joomsky.com/js-jobs-joomla/ product
https://github.com/AdamWallwork/CVEs/tree/main/2025/CVE-2025-22209 third-party-advisory