Joomsky Js Job Manager vulnerabilities

CVE-2025-32660 [CRITICAL] CWE-434 CVE-2025-32660: Unrestricted Upload of File with Dangerous Type vulnerability in JoomSky JS Job Manager js-jobs allo Unrestricted Upload of File with Dangerous Type vulnerability in JoomSky JS Job Manager js-jobs allows Upload a Web Shell to a Web Server.This issue affects JS Job Manager: from n/a through <= 2.0.2.

CVE-2025-32626 [CRITICAL] CWE-89 CVE-2025-32626: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Job Manager js-jobs allows SQL Injection.This issue affects JS Job Manager: from n/a through <= 2.0.2.

CVE-2025-32146 [HIGH] CWE-98 CVE-2025-32146: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Job Manager js-jobs allows PHP Local File Inclusion.This issue affects JS Job Manager: from n/a through <= 2.0.2.

CVE-2025-32627 [HIGH] CWE-98 CVE-2025-32627: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Job Manager js-jobs allows PHP Local File Inclusion.This issue affects JS Job Manager: from n/a through <= 2.0.2.

CVE-2023-28689 [MEDIUM] CWE-862 CVE-2023-28689: Missing Authorization vulnerability in JoomSky JS Job Manager allows Exploiting Incorrectly Configur Missing Authorization vulnerability in JoomSky JS Job Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through 2.0.0.

CVE-2023-31087 [HIGH] CWE-352 CVE-2023-31087: Cross-Site Request Forgery (CSRF) vulnerability in JoomSky JS Job Manager plugin <= 2.0.0 versions. Cross-Site Request Forgery (CSRF) vulnerability in JoomSky JS Job Manager plugin <= 2.0.0 versions.

CVE-2018-20974 [HIGH] CWE-352 CVE-2018-20974: The js-jobs plugin before 1.0.7 for WordPress has CSRF. The js-jobs plugin before 1.0.7 for WordPress has CSRF.

CVE-2025-31867 [MEDIUM] CWE-639 CVE-2025-31867: Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Job Manager js-jobs all Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through <= 2.0.2.

CVE-2025-31868 [MEDIUM] CWE-862 CVE-2025-31868: Missing Authorization vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Missing Authorization vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through <= 2.0.2.

CVE-2025-58234 [MEDIUM] CWE-79 CVE-2025-58234: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky JS Job Manager js-jobs allows Stored XSS.This issue affects JS Job Manager: from n/a through <= 2.0.2.

CVE-2023-25963 [MEDIUM] CWE-79 CVE-2023-25963: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in JoomSky JS Job Manager plugin <= 2 Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in JoomSky JS Job Manager plugin <= 2.0.0 versions.