The vulnerability CVE-2025-32626 affects JoomSky JS Job Manager (<= 2.0.2) and is caused by improper neutralization of special elements in SQL commands, enabling SQL Injection attacks. This allows unauthenticated remote attackers to execute crafted SQL queries that can compromise the confidentiality of the database. The CVSS 3.1 base score is 9.3, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, scope changed, high confidentiality impact, no integrity impact, and low availability impact. No patch or official remediation details are currently available.

Successful exploitation of this vulnerability could allow an attacker to extract sensitive information from the database, potentially leading to data disclosure. The integrity of the data is not impacted according to the CVSS vector, but availability impact is low. The vulnerability is remotely exploitable without authentication, increasing its risk profile. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected plugin and monitor for suspicious activity related to SQL injection attempts. Avoid exposing the vulnerable component to untrusted networks where possible.