CVE-2025-22206
published 2025-02-04CVE-2025-22206: A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.2 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL…
PriorityP339medium4.7CVSS 3.1
AVNACLPRHUINSUCLILAL
EPSS
8.71%
94.5th percentile
A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.2 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'fieldfor' parameter in the GDPR Field feature.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| joomsky.com | js_jobs_component_for_joomla | — | — |
| joomsky | js_jobs | 1.1.5 – 1.4.2 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Suricata
ET WEB_SPECIFIC_APPS Joomla JS jobs Plugin jsjobs GDPR Multiple Parameters SQL Injection Attempt (CVE-2025-22206, CVE-2025-22208)
suricata·2025-07-21·CVSS 4.7
CVE-2025-22206 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla JS jobs Plugin jsjobs GDPR Multiple Parameters SQL Injection Attempt (CVE-2025-22206, CVE-2025-22208)
ET WEB_SPECIFIC_APPS Joomla JS jobs Plugin jsjobs GDPR Multiple Parameters SQL Injection Attempt (CVE-2025-22206, CVE-2025-22208)
Rule: alert http any any -> $HOME_NET any (msg:"ET WEB_SPECIFIC_APPS Joomla JS jobs Plugin jsjobs GDPR Multiple Parameters SQL Injection Attempt (CVE-2025-22206, CVE-2025-22208)"; flow:established,to_server; http.method; content:"POST"; http.uri; bsize:24; content:"/administrator/index.php"; http.request_body; content:"option|3d|com_jsjobs"; fast_pattern; pcre:"/(?:fieldfor|filter_email)\x3d[^\x3c]*?(?:\x27|%27|\x2d{2}|%2d%2d)?(?:(?:S(?:HOW.+(?:C(?:UR(?:DAT|TIM)E|HARACTER.+SET)|(?:VARI|T)ABLES)|ELECT.+(?:FROM|USER|SLEEP|CONCAT))|U(?:NION\x20SELEC|PDATE.+SE)T|DELETE.+FROM|INSERT.+INTO)|S(?:HOW.+(?:C(?:HARACTER.+SET|UR(DATE|TIME))|(?:VARI|T)ABLES)|ELECT.+(?:FROM|
No public exploits indexed.
No writeups or analysis indexed.
2025-02-04
Published