JO
Vendor
JoomSky
40
CVEs
0
On KEV
0
New 30D
Products
JH10.0
JS Help Desk
JoomSky
16 CVEs0 on KEV0 new
JJ9.8
JS Job Manager
JoomSky
11 CVEs0 on KEV0 new
JJ9.8
JS Jobs
Joomsky
8 CVEs0 on KEV0 new
JJ7.1
J2 JOBS
Joomsky
2 CVEs0 on KEV0 new
JA9.8
JS Autoz
Joomsky
1 CVEs0 on KEV0 new
JS8.8
JS Support Ticket
Joomsky
1 CVEs0 on KEV0 new
WV8.1
WP Vehicle Manager
JoomSky
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-57652 | JH JS Help Desk JoomSky | 5.3 | Jun 26 | WordPress JS Help Desk plugin <= 3.1.0 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2019-25740 | JJ JS Jobs Joomsky | 6.5 | Jun 4 | Joomla com_jsjobs 1.2.6 Arbitrary File Deletion |
| CVE-2018-25327 | JJ JS Jobs Joomsky | 5.3 | May 17 | Joomla! Component Js Jobs 1.2.0 Cross-Site Request Forgery |
| CVE-2020-37226 | JJ J2 JOBS Joomsky | 7.1 | May 13 | Joomla J2 JOBS 1.3.0 Authenticated SQL Injection via sortby |
| CVE-2020-37224 | JJ J2 JOBS Joomsky | 7.1 | May 13 | Joomla J2 JOBS 1.3.0 Authenticated SQL Injection via sortby |
| CVE-2026-32535 | JH JS Help Desk JoomSky | 6.5 | Mar 25 | WordPress JS Help Desk plugin <= 3.0.3 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2026-32534 | JH JS Help Desk JoomSky | 8.5 | Mar 25 | WordPress JS Help Desk plugin <= 3.0.3 - SQL Injection vulnerability |
| CVE-2026-24959 | JH JS Help Desk JoomSky | 8.5 | Feb 20 | WordPress JS Help Desk plugin <= 3.0.1 - SQL Injection vulnerability |
| CVE-2025-58234 | JJ JS Job Manager JoomSky | 5.4 | Sep 22 | WordPress JS Job Manager Plugin <= 2.0.2 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-32626 | JJ JS Job Manager JoomSky | 9.8 | Apr 17 | WordPress JS Job Manager plugin <= 2.0.2 - SQL Injection vulnerability |
| CVE-2025-32660 | JJ JS Job Manager JoomSky | 9.8 | Apr 17 | WordPress JS Job Manager plugin <= 2.0.2 - Arbitrary File Upload vulnerability |
| CVE-2025-32627 | JJ JS Job Manager JoomSky | 8.1 | Apr 11 | WordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerability |
| CVE-2025-32146 | JJ JS Job Manager JoomSky | 8.8 | Apr 4 | WordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerability |
| CVE-2025-31868 | JJ JS Job Manager JoomSky | 5.3 | Apr 1 | WordPress JS Job Manager plugin <= 2.0.2 - Broken Access Control vulnerability |
| CVE-2025-31867 | JJ JS Job Manager JoomSky | 5.4 | Apr 1 | WordPress JS Job Manager Plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2025-30901 | JH JS Help Desk JoomSky | 8.1 | Apr 1 | WordPress JS Help Desk plugin <= 2.9.2 - Local File Inclusion vulnerability |
| CVE-2025-30886 | JH JS Help Desk JoomSky | 10.0 | Apr 1 | WordPress JS Help Desk plugin <= 2.9.2 - SQL Injection vulnerability |
| CVE-2025-30882 | JH JS Help Desk JoomSky | 7.5 | Apr 1 | WordPress JS Help Desk plugin <= 2.9.1 - Arbitrary File Download vulnerability |
| CVE-2025-30880 | JH JS Help Desk JoomSky | 7.5 | Apr 1 | WordPress JS Help Desk plugin <= 2.9.2 - Broken Access Control vulnerability |
| CVE-2025-30878 | JH JS Help Desk JoomSky | 9.1 | Apr 1 | WordPress JS Help Desk plugin <= 2.9.2 - Arbitrary File Deletion vulnerability |
| CVE-2025-25109 | WV WP Vehicle Manager JoomSky | 8.1 | Mar 3 | WordPress Vehicle Manager plugin <= 3.1 - Local File Inclusion vulnerability |
| CVE-2025-22208 | JJ JS Jobs Joomsky | 4.7 | Feb 15 | Extension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.3 for Joomla |
| CVE-2025-22209 | JJ JS Jobs Joomsky | 4.7 | Feb 15 | Extension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.3 for Joomla |
| CVE-2025-22206 | JJ JS Jobs Joomsky | 4.7 | Feb 4 | Extension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.2 for Joomla |
| CVE-2022-46840 | JH JS Help Desk Joomsky | 5.4 | Dec 13 | WordPress JS Help Desk plugin <= 2.7.1 - Broken Access Control |
| CVE-2022-46838 | JH JS Help Desk Joomsky | 9.1 | Dec 13 | WordPress JS Help Desk plugin <= 2.7.1 - Unauthenticated Settings Change Vulnerability |
| CVE-2023-28689 | JJ JS Job Manager JoomSky | 6.5 | Dec 9 | WordPress JS Job Manager plugin <= 2.0.0 - Broken Access Control vulnerability |
| CVE-2024-51670 | JH JS Help Desk JoomSky | 4.8 | Nov 9 | WordPress JS Help Desk plugin <= 2.8.7 - Stored Cross Site Scripting (XSS) vulnerability |
| CVE-2024-43274 | JH JS Help Desk Joomsky | 9.8 | Nov 1 | WordPress JS Help Desk – The Ultimate Help Desk plugin <= 2.8.6 - Broken Access Control vulnerability |
| CVE-2023-25444 | JH JS Help Desk Joomsky | 9.1 | May 17 | WordPress JS Help Desk – Best Help Desk & Support Plugin plugin <= 2.7.7 - Arbitrary File Upload vulnerability |
| CVE-2022-47151 | JH JS Help Desk Joomsky | 8.6 | Apr 17 | WordPress JS Help Desk plugin <= 2.7.1 - Unauth. SQL Injection Vulnerability |
| CVE-2023-31087 | JJ JS Job Manager JoomSky | 8.8 | Nov 9 | WordPress JS Job Manager Plugin <=2.0.0 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-25963 | JJ JS Job Manager Joomsky | 4.8 | Jun 16 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in JoomSky JS Job Manager plugin <= 2.0.0 versions |
| CVE-2019-17527 | JJ JS Jobs Joomsky | 9.8 | Dec 19 | dataForDepandantField in models/custormfields.php in the JS JOBS FREE extension before 1.2.7 for Joomla! allows SQL Injection via the… |
| CVE-2018-21002 | JH JS Help Desk Joomsky | 8.8 | Aug 27 | The js-support-ticket plugin before 2.0.6 for WordPress has CSRF |
| CVE-2018-20974 | JJ JS Job Manager Joomsky | 8.8 | Aug 16 | The js-jobs plugin before 1.0.7 for WordPress has CSRF |
| CVE-2018-9183 | JJ JS Jobs Joomsky | 5.4 | Apr 2 | The Joom Sky JS Jobs extension before 1.2.1 for Joomla! has XSS |
| CVE-2018-6006 | JA JS Autoz Joomsky | 9.8 | Feb 17 | SQL Injection exists in the JS Autoz 1.0.9 component for Joomla! via the vtype, pre, or prs parameter |
| CVE-2018-5994 | JJ JS Jobs Joomsky | 9.8 | Feb 17 | SQL Injection exists in the JS Jobs 1.1.9 component for Joomla! via the zipcode parameter in a newest-jobs request, or the ta parameter in a view_resume request |
| CVE-2018-6007 | JS JS Support Ticket Joomsky | 8.8 | Jan 29 | CSRF exists in the JS Support Ticket 1.1.0 component for Joomla! and allows attackers to inject HTML or edit a ticket |
