CVE-2025-22206: Joomsky Js Jobs

Medium severity, CVSS 4.7. EPSS: 9.5% chance of exploitation in the next 30 days.

A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.2 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'fieldfor' parameter in the GDPR Field feature.

Affected products

• Joomsky Js Jobs: from 1.1.5, up to and including 1.4.2

Published 2025-02-04. Last modified 2026-06-17.