PT-2025-30021 · Joomla · Js Jobs Plugin

Adam Wallwork · Published 2025-07-18 · Updated 2025-07-18 · CVE-2025-49484

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions JS Jobs plugin for Joomla versions 1.0.0 through 1.4.1

Description A SQL injection vulnerability in the JS Jobs plugin for Joomla allows low-privilege users to execute arbitrary SQL commands via the cvid parameter in the employee application feature.

Recommendations For versions 1.0.0 through 1.4.1, restrict access to the employee application feature to minimize the risk of exploitation.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-49484

Affected Products

Js Jobs Plugin

References · 8

• 🔥 https://exploit-db.com/exploits/52373 · Exploit
• 🔥 https://github.com/AdamWallwork/CVEs/tree/main/2025/CVE-2025-49484 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-49484 · Security Note
• https://t.me/cvetracker/28127 · Telegram Post
• https://t.me/cvenotify/129418 · Telegram Post
• https://joomsky.com/js-jobs-joomla · Note
• https://twitter.com/VulmonFeeds/status/1946178198544187393 · Twitter Post
• https://twitter.com/CVEnew/status/1946153079306375319 · Twitter Post