PatchTheCVEjoomsky vulnerabilities
Recent CVEs affecting joomsky products. 19 tracked.
joomsky has 19 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 19. Most recent: 2025-09-22. Highest priority: CVE-2025-32660 (score 50/100).
- CVE-2025-58234 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky
- CVE-2025-32660 CRITICAL 10.0 UPGRADE Unrestricted Upload of File with Dangerous Type vulnerability in JoomSky JS Job Manager js-jobs allows Upload
- CVE-2025-32627 HIGH 8.1 UPGRADE Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner
- CVE-2025-32626 CRITICAL 9.3 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky
- CVE-2025-32146 HIGH 8.8 UPGRADE Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner
- CVE-2025-31868 MEDIUM 5.3 UPGRADE Missing Authorization vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured
- CVE-2025-31867 MEDIUM 5.4 UPGRADE Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Job Manager js-jobs allows Exploi
- CVE-2025-30901 HIGH 8.1 UPGRADE Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner
- CVE-2025-30886 CRITICAL 9.3 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky
- CVE-2025-30882 HIGH 7.5 UPGRADE Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Hel
- CVE-2025-30880 HIGH 7.5 UPGRADE Missing Authorization vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiting Incorrectly Co
- CVE-2025-30878 HIGH 8.6 UPGRADE Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Hel
- CVE-2025-22209 MEDIUM 4.7 UPGRADE A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attac
- CVE-2025-22208 MEDIUM 4.7 UPGRADE A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attac
- CVE-2024-51670 MEDIUM 5.9 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky
- CVE-2024-43274 MEDIUM 5.8 UPGRADE Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Acce
- CVE-2023-28689 MEDIUM 6.5 UPGRADE Missing Authorization vulnerability in JoomSky JS Job Manager allows Exploiting Incorrectly Configured Access
- CVE-2022-46840 MEDIUM 5.4 UPGRADE Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Expl
- CVE-2022-46838 CRITICAL 9.1 UPGRADE Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Expl
FAQ
How do I fix joomsky vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is joomsky being exploited right now?
None of the tracked joomsky CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which joomsky CVE should I patch first?
CVE-2025-32660 currently ranks highest (50/100): Unrestricted Upload of File with Dangerous Type vulnerability in JoomSky JS Job Manager js-jobs allows Upload .