PT-2025-33482 · Joomla+1 · Joomla!+1

Adam Wallwork · Published 2025-08-15 · Updated 2025-08-15 · CVE-2025-54475

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions: JS Jobs plugin versions 1.3.2 through 1.4.4

Description: A SQL injection vulnerability in the JS Jobs plugin for Joomla allows low-privilege users to execute arbitrary SQL commands.

Recommendations: Update the JS Jobs plugin to a version later than 1.4.4.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-54475

Affected Products

Js Jobs

Joomla!

References · 7

• 🔥 https://github.com/AdamWallwork/CVEs/tree/main/2025/CVE-2025-54475 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-54475 · Security Note
• https://twitter.com/CVEnew/status/1956390291176350120 · Twitter Post
• https://joomsky.com/js-jobs-joomla · Note
• https://twitter.com/VulmonFeeds/status/1956435333345669325 · Twitter Post
• https://t.me/cveNotify/132430 · Telegram Post
• https://t.me/CVEtracker/30125 · Telegram Post