Joomsky Js Job Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Joomsky Js Job Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (11)

• CVE-2025-32660 — CVSS 10.0 (critical): Unrestricted Upload of File with Dangerous Type vulnerability in JoomSky JS Job Manager js-jobs allows Upload a Web Shell to a Web…
• CVE-2025-32626 — CVSS 9.3 (critical): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Job Manager js-jobs allows…
• CVE-2025-32146 — CVSS 8.8 (high): Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Job…
• CVE-2018-20974 — CVSS 8.8 (high): The js-jobs plugin before 1.0.7 for WordPress has CSRF.
• CVE-2025-32627 — CVSS 8.1 (high): Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Job…
• CVE-2025-58234 — CVSS 6.5 (medium): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky JS Job Manager js-jobs allows…
• CVE-2023-28689 — CVSS 6.5 (medium): Missing Authorization vulnerability in JoomSky JS Job Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This…
• CVE-2023-25963 — CVSS 5.9 (medium): Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in JoomSky JS Job Manager plugin <= 2.0.0 versions.
• CVE-2025-31867 — CVSS 5.4 (medium): Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured…
• CVE-2023-31087 — CVSS 5.4 (medium): Cross-Site Request Forgery (CSRF) vulnerability in JoomSky JS Job Manager plugin <= 2.0.0 versions.
• CVE-2025-31868 — CVSS 5.3 (medium): Missing Authorization vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured Access Control Security…