Joomsky: Security Vulnerabilities
Unrestricted Upload of File with Dangerous Type vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Using Malicious Files.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.7.
CVSS Score
9.1
EPSS Score
0.007
Published
2024-05-17
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1.
CVSS Score
8.6
EPSS Score
0.002
Published
2024-04-17
Cross-Site Request Forgery (CSRF) vulnerability in JoomSky JS Job Manager plugin <= 2.0.0 versions.
CVSS Score
5.4
EPSS Score
0.001
Published
2023-11-09
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in JoomSky JS Job Manager plugin <= 2.0.0 versions.
CVSS Score
5.9
EPSS Score
0.001
Published
2023-06-16
dataForDepandantField in models/custormfields.php in the JS JOBS FREE extension before 1.2.7 for Joomla! allows SQL Injection via the index.php?option=com_jsjobs&task=customfields.getfieldtitlebyfieldandfieldfo child parameter.
CVSS Score
9.8
EPSS Score
0.003
Published
2019-12-19
The js-support-ticket plugin before 2.0.6 for WordPress has CSRF.
CVSS Score
8.8
EPSS Score
0.001
Published
2019-08-27
The js-jobs plugin before 1.0.7 for WordPress has CSRF.
CVSS Score
8.8
EPSS Score
0.001
Published
2019-08-16
The Joom Sky JS Jobs extension before 1.2.1 for Joomla! has XSS.
CVSS Score
5.4
EPSS Score
0.003
Published
2018-04-02
SQL Injection exists in the JS Autoz 1.0.9 component for Joomla! via the vtype, pre, or prs parameter.
CVSS Score
9.8
EPSS Score
0.016
Published
2018-02-17
SQL Injection exists in the JS Jobs 1.1.9 component for Joomla! via the zipcode parameter in a newest-jobs request, or the ta parameter in a view_resume request.
CVSS Score
9.8
EPSS Score
0.014
Published
2018-02-17