CVSS base score
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L
What the vulnerability does
Joomla! Component Js Jobs 1.2.0 contains a cross-site request forgery vulnerability that allows attackers to perform state-changing actions without token validation. Attackers can craft malicious HTML forms targeting administrative endpoints like job.jobenforcedelete to delete job entries or modify component settings when administrators visit attacker-controlled pages.
Explanation of Vulnerability in Simple Terms
JS Jobs contains a cross-site request forgery (CSRF) vulnerability that allows an attacker to perform unauthorized actions on behalf of an authenticated user without their knowledge. The vulnerability affects versions 1.2.0 and requires no special privileges or user interaction beyond normal site browsing. Site administrators should update to a patched version when available.
What an attacker can do
Perform unauthorized actions on the site on behalf of logged-in users without their consent.
Potential impact on your site
Attackers can manipulate job postings, user accounts, or site settings through tricked administrators or users.
Conditions required to exploit
Victim must be logged into the site; attacker needs network access to send a malicious request.
Key dates
External resources
Related vulnerabilities
