CVE-2025-49484: Joomsky.com Js Jobs Component For Joomla

High severity, CVSS 8.7. EPSS: 4.1% chance of exploitation in the next 30 days.

A SQL injection vulnerability in the JS Jobs plugin versions 1.0.0-1.4.1 for Joomla allows low-privilege users to execute arbitrary SQL commands via the 'cvid' parameter in the employee application feature.

Affected products

• Joomsky.com Js Jobs Component For Joomla: version 1.0.0-1.4.1 only

Published 2025-07-18. Last modified 2026-06-17.