Boletines de Vulnerabilidades

CVE-2025-22206

   
Software afectado JOOMLA
 
A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.2 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'fieldfor' parameter in the GDPR Field feature.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-22206