The Joom Sky JS Jobs extension before 1.2.1 for Joomla! has XSS.
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
https://www.exploit-db.com/exploits/44401/ | third party advisory vdb entry exploit |
https://www.joomsky.com/products/js-jobs.html | product release notes |
https://vel.joomla.org/resolved/2146-js-jobs-1-2-0-xss-cross-site-scripting | vendor advisory |