Skip to content
Noroxi

JoomSky records

31 published records for vendor joomsky.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
45.2%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 23
  4. 24
  5. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

31 records
  • CVE-2018-6006
    45Plan

    SQL Injection exists in the JS Autoz 1.0.9 component for Joomla! via the vtype, pre, or prs parameter.

    CriticalCVSS 9.8Proof of conceptEPSS 19%

    joomsky · js autozFeb 17, 2018

  • CVE-2018-5994
    40Plan

    SQL Injection exists in the JS Jobs 1.1.9 component for Joomla! via the zipcode parameter in a newest-jobs request, or the ta parameter in a

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    joomsky · js jobsFeb 17, 2018

  • CVE-2025-30886
    40Plan

    WordPress JS Help Desk plugin <= 2.9.2 - SQL Injection vulnerability

    CriticalCVSS 10.0No exploitEPSS 1%

    joomsky · js help deskApr 1, 2025

  • CVE-2019-17527
    39Monitor

    dataForDepandantField in models/custormfields.php in the JS JOBS FREE extension before 1.2.7 for Joomla! allows SQL Injection via the index.

    CriticalCVSS 9.8No exploitEPSS 1%

    joomsky · js jobsDec 19, 2019

  • CVE-2025-32626
    39Monitor

    WordPress JS Job Manager plugin <= 2.0.2 - SQL Injection vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    joomsky · js job managerApr 17, 2025

  • CVE-2025-32660
    39Monitor

    WordPress JS Job Manager plugin <= 2.0.2 - Arbitrary File Upload vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    joomsky · js job managerApr 17, 2025

  • CVE-2024-43274
    39Monitor

    WordPress JS Help Desk – The Ultimate Help Desk plugin <= 2.8.6 - Broken Access Control vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    joomsky · js help deskNov 1, 2024

  • CVE-2018-6007
    36Monitor

    CSRF exists in the JS Support Ticket 1.1.0 component for Joomla! and allows attackers to inject HTML or edit a ticket.

    HighCVSS 8.8Proof of conceptEPSS 2%

    joomsky · js support ticketJan 29, 2018

  • CVE-2023-25444
    36Monitor

    WordPress JS Help Desk – Best Help Desk & Support Plugin plugin <= 2.7.7 - Arbitrary File Upload vulnerability

    CriticalCVSS 9.1No exploitEPSS 1%

    joomsky · js help deskMay 17, 2024

  • CVE-2022-46838
    36Monitor

    WordPress JS Help Desk plugin <= 2.7.1 - Unauthenticated Settings Change Vulnerability

    CriticalCVSS 9.1No exploitEPSS 1%

    joomsky · js help deskDec 13, 2024

  • CVE-2025-30878
    36Monitor

    WordPress JS Help Desk plugin <= 2.9.2 - Arbitrary File Deletion vulnerability

    CriticalCVSS 9.1No exploitEPSS 1%

    joomsky · js help deskApr 1, 2025

  • CVE-2025-32146
    35Monitor

    WordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    joomsky · js job managerApr 4, 2025

  • CVE-2018-21002
    35Monitor

    The js-support-ticket plugin before 2.0.6 for WordPress has CSRF.

    HighCVSS 8.8No exploitEPSS 1%

    joomsky · js help deskAug 27, 2019

  • CVE-2018-20974
    35Monitor

    The js-jobs plugin before 1.0.7 for WordPress has CSRF.

    HighCVSS 8.8No exploitEPSS 1%

    joomsky · js job managerAug 16, 2019

  • CVE-2023-31087
    35Monitor

    WordPress JS Job Manager Plugin <=2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    joomsky · js job managerNov 9, 2023

  • CVE-2022-47151
    34Monitor

    WordPress JS Help Desk plugin <= 2.7.1 - Unauth. SQL Injection Vulnerability

    HighCVSS 8.6No exploitEPSS 0%

    joomsky · js help deskApr 17, 2024

  • CVE-2025-32627
    32Monitor

    WordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerability

    HighCVSS 8.1No exploitEPSS 1%

    joomsky · js job managerApr 11, 2025

  • CVE-2025-30901
    32Monitor

    WordPress JS Help Desk plugin <= 2.9.2 - Local File Inclusion vulnerability

    HighCVSS 8.1No exploitEPSS 1%

    joomsky · js help deskApr 1, 2025

  • CVE-2025-30882
    30Monitor

    WordPress JS Help Desk plugin <= 2.9.1 - Arbitrary File Download vulnerability

    HighCVSS 7.5No exploitEPSS 1%

    joomsky · js help deskApr 1, 2025

  • CVE-2025-30880
    30Monitor

    WordPress JS Help Desk plugin <= 2.9.2 - Broken Access Control vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    joomsky · js help deskApr 1, 2025

  • CVE-2023-28689
    26Monitor

    WordPress JS Job Manager plugin <= 2.0.0 - Broken Access Control vulnerability

    MediumCVSS 6.5No exploitEPSS 1%

    joomsky · js job managerDec 9, 2024

  • CVE-2018-9183
    22Monitor

    The Joom Sky JS Jobs extension before 1.2.1 for Joomla! has XSS.

    MediumCVSS 5.4Proof of conceptEPSS 2%

    joomsky · js jobsApr 2, 2018

  • CVE-2025-22206
    21Monitor

    Extension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.2 for Joomla

    MediumCVSS 4.7No exploitEPSS 9%

    joomsky · js jobsFeb 4, 2025

  • CVE-2022-46840
    21Monitor

    WordPress JS Help Desk plugin <= 2.7.1 - Broken Access Control

    MediumCVSS 5.4No exploitEPSS 0%

    joomsky · js help deskDec 13, 2024

  • CVE-2025-31867
    21Monitor

    WordPress JS Job Manager Plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    joomsky · js job managerApr 1, 2025