Joomsky Js Jobs — known CVE vulnerabilities

Every CVE whose affected-product data names Joomsky Js Jobs, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2018-5994 — CVSS 9.8 (critical): SQL Injection exists in the JS Jobs 1.1.9 component for Joomla! via the zipcode parameter in a newest-jobs request, or the ta parameter in…
• CVE-2019-17527 — CVSS 9.8 (critical): dataForDepandantField in models/custormfields.php in the JS JOBS FREE extension before 1.2.7 for Joomla! allows SQL Injection via the…
• CVE-2018-9183 — CVSS 5.4 (medium): The Joom Sky JS Jobs extension before 1.2.1 for Joomla! has XSS.
• CVE-2025-22206 — CVSS 4.7 (medium): A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.2 for Joomla allows authenticated attackers (administrator) to…
• CVE-2025-22208 — CVSS 4.7 (medium): A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attackers (administrator) to…
• CVE-2025-22209 — CVSS 4.7 (medium): A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attackers (administrator) to…