Vulnerabilities (CVE)

Filtered by vendor Joomsky Subscribe
Filtered by product Js Job Manager
Total 11 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-28689 1 Joomsky 1 Js Job Manager 2026-01-28 N/A 6.5 MEDIUM
Missing Authorization vulnerability in JoomSky JS Job Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through 2.0.0.
CVE-2025-32626 1 Joomsky 1 Js Job Manager 2026-01-26 N/A 9.3 CRITICAL
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Job Manager allows SQL Injection. This issue affects JS Job Manager: from n/a through 2.0.2.
CVE-2025-32660 1 Joomsky 1 Js Job Manager 2026-01-23 N/A 10.0 CRITICAL
Unrestricted Upload of File with Dangerous Type vulnerability in JoomSky JS Job Manager allows Upload a Web Shell to a Web Server. This issue affects JS Job Manager: from n/a through 2.0.2.
CVE-2025-31867 1 Joomsky 1 Js Job Manager 2026-01-23 N/A 5.4 MEDIUM
Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Job Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JS Job Manager: from n/a through 2.0.2.
CVE-2025-31868 1 Joomsky 1 Js Job Manager 2026-01-23 N/A 5.3 MEDIUM
Missing Authorization vulnerability in JoomSky JS Job Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JS Job Manager: from n/a through 2.0.2.
CVE-2025-32146 1 Joomsky 1 Js Job Manager 2026-01-23 N/A 8.8 HIGH
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Job Manager allows PHP Local File Inclusion. This issue affects JS Job Manager: from n/a through 2.0.2.
CVE-2025-32627 1 Joomsky 1 Js Job Manager 2026-01-23 N/A 8.1 HIGH
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Job Manager allows PHP Local File Inclusion. This issue affects JS Job Manager: from n/a through 2.0.2.
CVE-2025-58234 1 Joomsky 1 Js Job Manager 2026-01-23 N/A 6.5 MEDIUM
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky JS Job Manager allows Stored XSS. This issue affects JS Job Manager: from n/a through 2.0.2.
CVE-2023-31087 1 Joomsky 1 Js Job Manager 2024-11-21 N/A 8.8 HIGH
Cross-Site Request Forgery (CSRF) vulnerability in JoomSky JS Job Manager plugin <= 2.0.0 versions.
CVE-2023-25963 1 Joomsky 1 Js Job Manager 2024-11-21 N/A 5.9 MEDIUM
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in JoomSky JS Job Manager plugin <= 2.0.0 versions.
CVE-2018-20974 1 Joomsky 1 Js Job Manager 2024-11-21 6.8 MEDIUM 8.8 HIGH
The js-jobs plugin before 1.0.7 for WordPress has CSRF.