CVE-2025-49484: CWE-89: Improper Neutralization of Special Elements used in an SQL Command in joomsky.com JS Jobs component for Joomla
Severity: highType: vulnerabilityCVE-2025-49484
A SQL injection vulnerability in the JS Jobs plugin versions 1.0.0-1.4.1 for Joomla allows low-privilege users to execute arbitrary SQL commands via the 'cvid' parameter in the employee application feature.
CVE-2025-49484: CWE-89: Improper Neutralization of Special Elements used in an SQL Command in joomsky.com JS Jobs component for Joomla
High
Published: Fri Jul 18 2025 (07/18/2025, 09:51:44 UTC)
Source: CVE Database V5
Vendor/Project: joomsky.com
Product: JS Jobs component for Joomla
Description
A SQL injection vulnerability in the JS Jobs plugin versions 1.0.0-1.4.1 for Joomla allows low-privilege users to execute arbitrary SQL commands via the 'cvid' parameter in the employee application feature.
Technical Details
- Data Version
- 5.1
- Assigner Short Name
- Joomla
- Date Reserved
- 2025-06-05T13:21:31.503Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 687a1b67a83201eaacf1f460
Added to database: 7/18/2025, 10:01:11 AM
Last updated: 7/18/2025, 10:01:11 AM
Views: 1
Related Threats
CVE-2025-50126: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in rsjoomla.com RSBlog! component for Joomla
MediumVulnerabilityFri Jul 18 2025
CVE-2025-50058: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in rsjoomla.com RSDirectory! component for Joomla
MediumVulnerabilityFri Jul 18 2025
CVE-2025-50057: CWE-400 Uncontrolled Resource Consumption in rsjoomla.com RSFiles! component for Joomla
MediumVulnerabilityFri Jul 18 2025
CVE-2025-50056: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in rsjoomla.com RSMail! component for Joomla
MediumVulnerabilityFri Jul 18 2025
CVE-2025-49486: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in balbooa.com Balbooa Gallery component for Joomla
HighVulnerabilityFri Jul 18 2025
Actions
Please log in to the Console to use AI analysis features.
Need enhanced features?
Contact root@offseq.com for Pro access with improved analysis and higher rate limits.