CVE-2025-22209

published 2025-02-15

CVE-2025-22209: A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL…

Priority P4 30 medium 4.7 CVSS 3.1

AV N AC L PR H UI N S U C L I L A L

A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'searchpaymentstatus' parameter in the Employer Payment History search feature.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
joomsky.com	js_jobs_component_for_joomla	—	—
joomsky	js_jobs	1.1.5 – 1.4.3	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-89