JS Jobs
Affected versions: ≤ 1.4.4
Full advisory: nvd.nist.gov
CVE-2019-25740MediumPublished 4 June 2026
JS Jobs (com_jsjobs) <= 1.4.4 - Authenticated SQL Injection
JS Jobs (JoomSky) versions up to and including 1.4.4 contain multiple SQL injection flaws reachable by low-privilege/authenticated users (CVE-2025-22206, CVE-2025-22208, CVE-2025-22209, CVE-2025-49484, CVE-2025-54475). Update to the latest release. Also within this rule: CVE-2019-25740 (JS Jobs 1.2.6) and CVE-2018-25327 (JS Jobs 1.2.0), both below this ceiling and needing no separate row.
Affected versions: ≤ 1.4.4
Official record: cve.org · NVD
Related vulnerabilities
Every connected Joomla site is checked against this rule on each audit, and flagged if it runs an affected version.
Affected extensions and versions
Running an affected version on a site you manage?
A free audit tells you which of your Joomla and WordPress sites run an affected version, which are out of date, and which have not been backed up. No card required. If a site is already compromised, fix.mysites.guru is a single fixed fee per incident, usually resolved the same day.
Rules current as of 25 August 2026.