CVE-2025-22209: Joomsky Js Jobs

Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days.

A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'searchpaymentstatus' parameter in the Employer Payment History search feature.

Affected products

• Joomsky Js Jobs: from 1.1.5, up to and including 1.4.3

Published 2025-02-15. Last modified 2026-06-17.