What is GHSA-mpvw-h4vq-pmfx?

GHSA-mpvw-h4vq-pmfx is a security advisory published by GitHub Security Advisories with Medium severity. Joomla! Component Js Jobs 1.2.0 contains a cross-site request forgery vulnerability that allows...

Which CVE IDs does GHSA-mpvw-h4vq-pmfx cover?

GHSA-mpvw-h4vq-pmfx covers the following CVE IDs: CVE-2018-25327. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-mpvw-h4vq-pmfx?

GHSA-mpvw-h4vq-pmfx has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-mpvw-h4vq-pmfxMediumCVSS 5.3

Joomla! Component Js Jobs 1.2.0 contains a cross-site request forgery vulnerability that allows...

Vendor

GitHub Security Advisories

Published

May 17, 2026

Last Modified

May 17, 2026

🔗 CVE IDs covered (1)

CVE-2018-25327 →

📋 Description

Joomla! Component Js Jobs 1.2.0 contains a cross-site request forgery vulnerability that allows attackers to perform state-changing actions without token validation. Attackers can craft malicious HTML forms targeting administrative endpoints like job.jobenforcedelete to delete job entries or modify component settings when administrators visit attacker-controlled pages.

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2018-25327
https://extensions.joomla.org/extension/js-jobs
https://www.exploit-db.com/exploits/44492
https://www.joomsky.com
https://www.vulncheck.com/advisories/joomla-component-js-jobs-cross-site-request-forgery
https://github.com/advisories/GHSA-mpvw-h4vq-pmfx