PatchTheCVE: joomskyhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-58234: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky https://patchthecve.com/cve/CVE-2025-58234.htmlhttps://patchthecve.com/cve/CVE-2025-58234.htmlSun, 11 Oct 2026 21:10:00 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky JS Job Manager js-jobs allows Stored XSS.This issue affects JS Job Manager: from n/a through <= 2.0.2.CVE-2025-32660: Unrestricted Upload of File with Dangerous Type vulnerability in JoomSky JS Job Manager js-jobs allows Upload https://patchthecve.com/cve/CVE-2025-32660.htmlhttps://patchthecve.com/cve/CVE-2025-32660.htmlWed, 17 Jun 2026 09:12:22 +0000CRITICAL 10.0: Unrestricted Upload of File with Dangerous Type vulnerability in JoomSky JS Job Manager js-jobs allows Upload a Web Shell to a Web Server.This issue affects JS Job Manager: from n/a through <= 2.0.2.CVE-2025-32626: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky https://patchthecve.com/cve/CVE-2025-32626.htmlhttps://patchthecve.com/cve/CVE-2025-32626.htmlWed, 17 Jun 2026 09:12:19 +0000CRITICAL 9.3: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Job Manager js-jobs allows SQL Injection.This issue affects JS Job Manager: from n/a through <= 2.0.2.CVE-2025-32627: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerhttps://patchthecve.com/cve/CVE-2025-32627.htmlhttps://patchthecve.com/cve/CVE-2025-32627.htmlWed, 17 Jun 2026 09:12:19 +0000HIGH 8.1: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Job Manager js-jobs allows PHP Local File Inclusion.This issue affects JS Job Manager: from n/a through <= 2.0.2.CVE-2025-32146: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerhttps://patchthecve.com/cve/CVE-2025-32146.htmlhttps://patchthecve.com/cve/CVE-2025-32146.htmlWed, 17 Jun 2026 09:11:30 +0000HIGH 8.8: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Job Manager js-jobs allows PHP Local File Inclusion.This issue affects JS Job Manager: from n/a through <= 2.0.2.CVE-2025-31868: Missing Authorization vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configuredhttps://patchthecve.com/cve/CVE-2025-31868.htmlhttps://patchthecve.com/cve/CVE-2025-31868.htmlWed, 17 Jun 2026 09:11:05 +0000MEDIUM 5.3: Missing Authorization vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through <= 2.0.2.CVE-2025-31867: Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Job Manager js-jobs allows Exploihttps://patchthecve.com/cve/CVE-2025-31867.htmlhttps://patchthecve.com/cve/CVE-2025-31867.htmlWed, 17 Jun 2026 09:11:05 +0000MEDIUM 5.4: Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through <= 2.0.2.CVE-2025-30901: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerhttps://patchthecve.com/cve/CVE-2025-30901.htmlhttps://patchthecve.com/cve/CVE-2025-30901.htmlWed, 17 Jun 2026 09:09:32 +0000HIGH 8.1: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Help Desk js-support-ticket allows PHP Local File Inclusion.This issue affects JS Help Desk: from n/a through <= 2.9.2.CVE-2025-30886: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky https://patchthecve.com/cve/CVE-2025-30886.htmlhttps://patchthecve.com/cve/CVE-2025-30886.htmlWed, 17 Jun 2026 09:09:31 +0000CRITICAL 9.3: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help Desk js-support-ticket allows SQL Injection.This issue affects JS Help Desk: from n/a through <= 2.9.2.CVE-2025-30882: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Helhttps://patchthecve.com/cve/CVE-2025-30882.htmlhttps://patchthecve.com/cve/CVE-2025-30882.htmlWed, 17 Jun 2026 09:09:30 +0000HIGH 7.5: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Help Desk js-support-ticket allows Path Traversal.This issue affects JS Help Desk: from n/a through <= 2.9.1.CVE-2025-30880: Missing Authorization vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiting Incorrectly Cohttps://patchthecve.com/cve/CVE-2025-30880.htmlhttps://patchthecve.com/cve/CVE-2025-30880.htmlWed, 17 Jun 2026 09:09:30 +0000HIGH 7.5: Missing Authorization vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through <= 2.9.2.CVE-2025-30878: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Helhttps://patchthecve.com/cve/CVE-2025-30878.htmlhttps://patchthecve.com/cve/CVE-2025-30878.htmlWed, 17 Jun 2026 09:09:30 +0000HIGH 8.6: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Help Desk js-support-ticket allows Path Traversal.This issue affects JS Help Desk: from n/a through <= 2.9.2.CVE-2025-22209: A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attachttps://patchthecve.com/cve/CVE-2025-22209.htmlhttps://patchthecve.com/cve/CVE-2025-22209.htmlWed, 17 Jun 2026 08:45:35 +0000MEDIUM 4.7: A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'searchpaymentstatus' parameter in the Employer Payment History search feature.CVE-2025-22208: A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attachttps://patchthecve.com/cve/CVE-2025-22208.htmlhttps://patchthecve.com/cve/CVE-2025-22208.htmlWed, 17 Jun 2026 08:45:35 +0000MEDIUM 4.7: A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'filter_email' parameter in the GDPR Erase Data Request search feature.CVE-2022-46840: Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Explhttps://patchthecve.com/cve/CVE-2022-46840.htmlhttps://patchthecve.com/cve/CVE-2022-46840.htmlWed, 17 Jun 2026 05:12:30 +0000MEDIUM 5.4: Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1.CVE-2022-46838: Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Explhttps://patchthecve.com/cve/CVE-2022-46838.htmlhttps://patchthecve.com/cve/CVE-2022-46838.htmlWed, 17 Jun 2026 05:12:30 +0000CRITICAL 9.1: Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1.CVE-2023-28689: Missing Authorization vulnerability in JoomSky JS Job Manager allows Exploiting Incorrectly Configured Access https://patchthecve.com/cve/CVE-2023-28689.htmlhttps://patchthecve.com/cve/CVE-2023-28689.htmlWed, 17 Jun 2026 05:48:34 +0000MEDIUM 6.5: Missing Authorization vulnerability in JoomSky JS Job Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through 2.0.0.CVE-2024-51670: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky https://patchthecve.com/cve/CVE-2024-51670.htmlhttps://patchthecve.com/cve/CVE-2024-51670.htmlWed, 17 Jun 2026 08:06:07 +0000MEDIUM 5.9: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky JS Help Desk js-support-ticket allows Stored XSS.This issue affects JS Help Desk: from n/a through <= 2.8.7.CVE-2024-43274: Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Accehttps://patchthecve.com/cve/CVE-2024-43274.htmlhttps://patchthecve.com/cve/CVE-2024-43274.htmlWed, 17 Jun 2026 07:50:43 +0000MEDIUM 5.8: Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.6.