CVE-2025-22208: Extension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.3 for Joomla
A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'filteremail' parameter in the GDPR Erase Data Request search feature.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22208?
CVE-2025-22208 is considered a high severity vulnerability due to its ability to allow authenticated attackers to execute arbitrary SQL commands.
How do I fix CVE-2025-22208?
To fix CVE-2025-22208, update the JS Jobs plugin to a version later than 1.4.3.
Who is affected by CVE-2025-22208?
CVE-2025-22208 affects authenticated Joomla users with administrator privileges using JS Jobs plugin versions 1.1.5 to 1.4.3.
What type of attack is possible with CVE-2025-22208?
CVE-2025-22208 allows for SQL injection attacks through the 'filter_email' parameter.
Is it necessary to implement additional security measures after patching CVE-2025-22208?
Yes, it is recommended to implement additional security measures like input validation and regular security audits even after patching CVE-2025-22208.