PatchTheCVE: js job managerhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-58234: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky https://patchthecve.com/cve/CVE-2025-58234.htmlhttps://patchthecve.com/cve/CVE-2025-58234.htmlSun, 11 Oct 2026 21:10:00 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky JS Job Manager js-jobs allows Stored XSS.This issue affects JS Job Manager: from n/a through <= 2.0.2.CVE-2025-32660: Unrestricted Upload of File with Dangerous Type vulnerability in JoomSky JS Job Manager js-jobs allows Upload https://patchthecve.com/cve/CVE-2025-32660.htmlhttps://patchthecve.com/cve/CVE-2025-32660.htmlWed, 17 Jun 2026 09:12:22 +0000CRITICAL 10.0: Unrestricted Upload of File with Dangerous Type vulnerability in JoomSky JS Job Manager js-jobs allows Upload a Web Shell to a Web Server.This issue affects JS Job Manager: from n/a through <= 2.0.2.CVE-2025-32626: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky https://patchthecve.com/cve/CVE-2025-32626.htmlhttps://patchthecve.com/cve/CVE-2025-32626.htmlWed, 17 Jun 2026 09:12:19 +0000CRITICAL 9.3: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Job Manager js-jobs allows SQL Injection.This issue affects JS Job Manager: from n/a through <= 2.0.2.CVE-2025-32627: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerhttps://patchthecve.com/cve/CVE-2025-32627.htmlhttps://patchthecve.com/cve/CVE-2025-32627.htmlWed, 17 Jun 2026 09:12:19 +0000HIGH 8.1: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Job Manager js-jobs allows PHP Local File Inclusion.This issue affects JS Job Manager: from n/a through <= 2.0.2.CVE-2025-32146: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerhttps://patchthecve.com/cve/CVE-2025-32146.htmlhttps://patchthecve.com/cve/CVE-2025-32146.htmlWed, 17 Jun 2026 09:11:30 +0000HIGH 8.8: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Job Manager js-jobs allows PHP Local File Inclusion.This issue affects JS Job Manager: from n/a through <= 2.0.2.CVE-2025-31868: Missing Authorization vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configuredhttps://patchthecve.com/cve/CVE-2025-31868.htmlhttps://patchthecve.com/cve/CVE-2025-31868.htmlWed, 17 Jun 2026 09:11:05 +0000MEDIUM 5.3: Missing Authorization vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through <= 2.0.2.CVE-2025-31867: Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Job Manager js-jobs allows Exploihttps://patchthecve.com/cve/CVE-2025-31867.htmlhttps://patchthecve.com/cve/CVE-2025-31867.htmlWed, 17 Jun 2026 09:11:05 +0000MEDIUM 5.4: Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through <= 2.0.2.CVE-2023-28689: Missing Authorization vulnerability in JoomSky JS Job Manager allows Exploiting Incorrectly Configured Access https://patchthecve.com/cve/CVE-2023-28689.htmlhttps://patchthecve.com/cve/CVE-2023-28689.htmlWed, 17 Jun 2026 05:48:34 +0000MEDIUM 6.5: Missing Authorization vulnerability in JoomSky JS Job Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through 2.0.0.