This vulnerability in JoomSky JS Job Manager versions up to 2.0.2 arises from improper validation of filenames used in PHP include or require statements, enabling PHP Local File Inclusion (LFI). LFI vulnerabilities allow attackers to include files from the local filesystem, which can lead to disclosure of sensitive information, code execution, or denial of service. The CVSS 3.1 base score of 8.1 reflects high impact on confidentiality, integrity, and availability, with network attack vector, high attack complexity, no privileges required, and no user interaction needed.

Successful exploitation can lead to full compromise of the affected system's confidentiality, integrity, and availability by including and executing local files. This can expose sensitive data, allow code execution, or disrupt service. The vulnerability affects all versions of JS Job Manager up to and including 2.0.2. No known exploits are reported in the wild yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to vulnerable endpoints and applying web application firewall rules to detect and block suspicious include/require requests. Monitor vendor channels for updates and apply patches promptly once available.