CVE-2025-22208: Joomsky Js Jobs

Medium severity, CVSS 4.7. EPSS: 0.7% chance of exploitation in the next 30 days.

A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'filter_email' parameter in the GDPR Erase Data Request search feature.

Affected products

  • Joomsky Js Jobs: from 1.1.5, up to and including 1.4.3

Published 2025-02-15. Last modified 2026-06-17.