Description (CNA)
A SQL injection vulnerability in the JS Jobs plugin versions 1.0.0-1.4.1 for Joomla allows low-privilege users to execute arbitrary SQL commands via the 'cvid' parameter in the employee application feature.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| joomsky.com / JS Jobs component for Joomla | affected 1.0.0-1.4.1 |
CWE
CWE-89
References
- https://joomsky.com/js-jobs-joomla/
- https://github.com/AdamWallwork/CVEs/tree/main/2025/CVE-2025-49484
- https://www.exploit-db.com/exploits/52373
ADP enrichment
No English description supplied.
No references supplied.