CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 보통4.8 |
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in JoomSky JS Job Manager plugin <= 2.0.0 versions. |
| 16/06/2023 |
| CVE-2019-17527 | 심각9.8 | dataForDepandantField in models/custormfields.php in the JS JOBS FREE extension before 1.2.7 for Joomla! allows SQL Injection via the index.php?option=com_jsjobs&task=customfields.getfieldtitlebyfieldandfieldfo child parameter. | 19/12/2019 |
| CVE-2018-21002 | 높음8.8 | The js-support-ticket plugin before 2.0.6 for WordPress has CSRF. | 27/08/2019 |
| CVE-2018-20974 | 높음8.8 | The js-jobs plugin before 1.0.7 for WordPress has CSRF. | 16/08/2019 |
| CVE-2018-9183 | 보통5.4 | The Joom Sky JS Jobs extension before 1.2.1 for Joomla! has XSS. | 02/04/2018 |
| CVE-2018-6006 | 심각9.8 | SQL Injection exists in the JS Autoz 1.0.9 component for Joomla! via the vtype, pre, or prs parameter. | 17/02/2018 |
| CVE-2018-5994 | 심각9.8 | SQL Injection exists in the JS Jobs 1.1.9 component for Joomla! via the zipcode parameter in a newest-jobs request, or the ta parameter in a view_resume request. | 17/02/2018 |
| CVE-2018-6007 | 높음8.8 | CSRF exists in the JS Support Ticket 1.1.0 component for Joomla! and allows attackers to inject HTML or edit a ticket. | 29/01/2018 |