CVE-2025-22206

A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.2 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'fieldfor' parameter in the GDPR Field feature.

Score

CVSS 3.1 4.7 Medium

Status

Analyzed - security@joomla.org

Published

2025-02-04

Last modified

2025-02-06

Weaknesses

CWE-89

Affected products

• Js Jobs (Joomsky)
• Js Jobs Component For Joomla (Joomsky.com)

References

• https://decrypt.locker/obtaining-my-first-cve/
• https://joomsky.com/js-jobs-joomla/