CVE-2025-22208

Summary

CVE-2025-22208 is a SQL injection vulnerability affecting the JS Jobs plugin versions 1.1.5-1.4.3 used in Joomla. Authenticated attackers, specifically those with administrator privileges, can exploit this vulnerability by manipulating the 'filter_email' parameter in the GDPR Erase Data Request search feature. Successful exploitation grants attackers the ability to execute arbitrary SQL commands, posing a significant risk to data confidentiality and integrity. This vulnerability underscores the importance of maintaining updated software and implementing secure coding practices.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.