Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior
Críticas / altas1447▲ 86 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
9 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Media (6.9) | 0.14% | — | Joomla JS JobsAI | 17/5/2026 | 17/6/2026 | Joomla! Component Js Jobs 1.2.0 contains a cross-site request forgery vulnerability that allows attackers to perform state-changing actions without token validation. Attackers can craft malicious HTML forms targeting administrative endpoints like job.jobenforcedelete to delete job entries or modify component settings… | |
| Aplazada | Alta (8.7) | 0.27% | — | JoomlaAIJoomsky JS JobsAI | 15/8/2025 | 17/6/2026 | A SQL injection vulnerability in the JS Jobs plugin versions 1.3.2-1.4.4 for Joomla allows low-privilege users to execute arbitrary SQL commands. | |
| Aplazada | Alta (8.7) | 3.8% | 💥 Exploit | Joomla JS JobsAI | 18/7/2025 | 17/6/2026 | A SQL injection vulnerability in the JS Jobs plugin versions 1.0.0-1.4.1 for Joomla allows low-privilege users to execute arbitrary SQL commands via the 'cvid' parameter in the employee application feature. | |
| Analizada | Media (4.7) | 0.30% | — | Joomsky JS Jobs | 15/2/2025 | 17/6/2026 | A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'searchpaymentstatus' parameter in the Employer Payment History search feature. | |
| Analizada | Media (4.7) | 0.65% | — | Joomsky JS Jobs | 15/2/2025 | 17/6/2026 | A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'filter_email' parameter in the GDPR Erase Data Request search feature. | |
| Analizada | Media (4.7) | 9.5% | — | Joomsky JS Jobs | 4/2/2025 | 17/6/2026 | A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.2 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'fieldfor' parameter in the GDPR Field feature. | |
| Modificada | Crítica (9.8) | 1.0% | — | Joomsky JS Jobs | 19/12/2019 | 17/6/2026 | dataForDepandantField in models/custormfields.php in the JS JOBS FREE extension before 1.2.7 for Joomla! allows SQL Injection via the index.php?option=com_jsjobs&task=customfields.getfieldtitlebyfieldandfieldfo child parameter. | |
| Modificada | Media (5.4) | 2.2% | 💥 Exploit | Joomsky JS Jobs | 2/4/2018 | 17/6/2026 | The Joom Sky JS Jobs extension before 1.2.1 for Joomla! has XSS. | |
| Modificada | Crítica (9.8) | 2.7% | 💥 Exploit | Joomsky JS Jobs | 17/2/2018 | 17/6/2026 | SQL Injection exists in the JS Jobs 1.1.9 component for Joomla! via the zipcode parameter in a newest-jobs request, or the ta parameter in a view_resume request. |