Vulnerability Bulletins

CVE-2025-49484

   
Affected software JOOMLA
 
A SQL injection vulnerability in the JS Jobs plugin versions 1.0.0-1.4.1 for Joomla allows low-privilege users to execute arbitrary SQL commands via the 'cvid' parameter in the employee application feature.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-49484