PatchTheCVEjs job manager vulnerabilities and fixes
Recent CVEs affecting js job manager, with upgrade or downgrade steps. 8 tracked.
Also searched as: jsjobmanager.
js job manager has 8 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 8. Most recent: 2025-09-22. Highest priority: CVE-2025-32660 (score 50/100).
- CVE-2025-58234 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky
- CVE-2025-32660 CRITICAL 10.0 UPGRADE Unrestricted Upload of File with Dangerous Type vulnerability in JoomSky JS Job Manager js-jobs allows Upload
- CVE-2025-32627 HIGH 8.1 UPGRADE Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner
- CVE-2025-32626 CRITICAL 9.3 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky
- CVE-2025-32146 HIGH 8.8 UPGRADE Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner
- CVE-2025-31868 MEDIUM 5.3 UPGRADE Missing Authorization vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured
- CVE-2025-31867 MEDIUM 5.4 UPGRADE Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Job Manager js-jobs allows Exploi
- CVE-2023-28689 MEDIUM 6.5 UPGRADE Missing Authorization vulnerability in JoomSky JS Job Manager allows Exploiting Incorrectly Configured Access
FAQ
How do I fix js job manager vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is js job manager being exploited right now?
None of the tracked js job manager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which js job manager CVE should I patch first?
CVE-2025-32660 currently ranks highest (50/100): Unrestricted Upload of File with Dangerous Type vulnerability in JoomSky JS Job Manager js-jobs allows Upload .