CVE-2018-25327 Joomla! Component Js Jobs 1.2.0 Cross-Site Request Forgery
MediumCVSS 6.9
EPSS 0.14%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Joomla! Component Js Jobs 1.2.0 contains a cross-site request forgery vulnerability that allows attackers to perform state-changing actions without token validation. Attackers can craft malicious HTML forms targeting administrative endpoints like job.jobenforcedelete to delete job entries or modify component settings when administrators visit attacker-controlled pages.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| JoomSky js jobs | = 1.2.0 | No fix listed |
References
- ExploitDB-44492 exploit
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: Joomla! Component Js Jobs 1.2.0 Cross-Site Request Forgery third-party-advisory