CVE-2019-25740 - Joomla com_jsjobs 1.2.6 Arbitrary File Deletion

Back Back to CVE browser

HIGH

Joomla com_jsjobs 1.2.6 Arbitrary File Deletion

Published Jun 4, 2026

7.1

HIGH

CVSS 4.0

EPSS 0.33%

Description

Joomla com_jsjobs 1.2.6 contains an arbitrary file deletion vulnerability that allows authenticated attackers to delete files by manipulating custom userfield parameters. Attackers can send POST requests to the job.savejob task with path traversal sequences in the field_2 parameter to delete arbitrary files accessible to the web server.

Affected products

Vendor Joomsky Product JS Jobs Default
n/a
- Version
  1.2.6
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Joomsky

JS Jobs

n/a

Version	Status	Constraints
1.2.6	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-20176
Advisory
https://www.exploit-db.com/exploits/47281
exploit
https://www.joomsky.com/
product
https://www.joomsky.com/5/download/1
product
https://www.vulncheck.com/advisories/joomla-com-jsjobs-arbitrary-file-deletion
third-party-advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-20176		Advisory
https://www.exploit-db.com/exploits/47281		exploit
https://www.joomsky.com/		product
https://www.joomsky.com/5/download/1		product
https://www.vulncheck.com/advisories/joomla-com-jsjobs-arbitrary-file-deletion		third-party-advisory