CVE-2025-22206

The JS Jobs plugin for Joomla (versions 1.1.5-1.4.2 ) contains a SQL injection vulnerability (CWE-89). Authenticated attackers with administrator privileges can execute arbitrary SQL commands by targeting the 'fieldfor' parameter within the GDPR Field feature . To mitigate this risk, it is recomm...

CVE-2025-22206 Extension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.2 for Joomla

A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.2 for Joomla allows authenticated attackers administrator to execute arbitrary SQL commands via the 'fieldfor' parameter in the GDPR Field feature...