Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Joomsky

First CVE: Jan 29, 2018Active for: 8 yearsTotal CVEs: 33
46.7
VTI Score
High

Joomsky develops a focused line of Joomla-based extensions and components—including help desk, job management, ticketing, and support tools—that extend the functionality of widely deployed Joomla installations. Vulnerabilities affecting this vendor skew strongly toward critical-severity outcomes and frequently acquire public exploit tooling, reflecting the accessibility of web-application code and the attractiveness of compromised support and administrative interfaces. The exposure recurs through a durable pattern of web-application weaknesses: SQL injection, missing authorization checks, cross-site request forgery, cross-site scripting, and PHP remote file inclusion that are characteristic of server-side application logic handling user input and file operations. Defenders should treat Joomla installations running these extensions as high-value targets, prioritize patching of administrative and ticketing components, and enforce input validation and access controls at the application layer; live severity, exploitation, and exposure counts are shown alongside this summary.

FAUCET AI Generated
33
Total CVEs
More Total CVEs than 98% of tracked vendors
1.1
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 74% of tracked vendors
7.6
Avg CVSS Score
Higher Avg CVSS Score than 72% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Joomsky over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jan 29, 2018
8 years ago
Most Recent CVE
Jun 26, 2026
28 days ago

Products(5 total)

Top CVEs

Signals from CVEs in this vendor scope (33 CVEs).

33 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2018-6006CRITICAL
SQL Injection exists in the JS Autoz 1.0.9 component for Joomla! via the vtype, pre, or prs parameter.
Feb 17, 20189.850NOYES
CVE-2018-5994CRITICAL
SQL Injection exists in the JS Jobs 1.1.9 component for Joomla! via the zipcode parameter in a newest-jobs request, or the ta parameter in a view_resume request.
Feb 17, 20189.843NOYES
CVE-2018-6007HIGH
CSRF exists in the JS Support Ticket 1.1.0 component for Joomla! and allows attackers to inject HTML or edit a ticket.
Jan 29, 20188.838NOYES
CVE-2018-9183MEDIUM
The Joom Sky JS Jobs extension before 1.2.1 for Joomla! has XSS.
Apr 2, 20185.429NOYES
CVE-2025-30878CRITICAL
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Help Desk js-support-ticket allows Path Traversal.This issue affects JS H
Apr 1, 20259.128NONO
CVE-2019-17527CRITICAL
dataForDepandantField in models/custormfields.php in the JS JOBS FREE extension before 1.2.7 for Joomla! allows SQL Injection via the index.php?option=com_jsjobs&task=customfields.
Dec 19, 20199.828NONO
CVE-2025-32660CRITICAL
Unrestricted Upload of File with Dangerous Type vulnerability in JoomSky JS Job Manager js-jobs allows Upload a Web Shell to a Web Server.This issue affects JS Job Manager: from n/
Apr 17, 20259.827NONO
CVE-2022-46838CRITICAL
Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issu
Dec 13, 20249.127NONO
CVE-2026-57652MEDIUM
Unauthenticated Insecure Direct Object References (IDOR) in JS Help Desk <= 3.1.0 versions.
Jun 26, 20265.326NONO
CVE-2025-30886CRITICAL
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help Desk js-support-ticket allows SQL Injection.This issue affects
Apr 1, 202510.026NONO
View all 33 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products33 CVEs
36%
33%
30%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network33 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low31 (93.9%)
High2 (6.1%)
Unknown0 (0.0%)
User Interaction
None25 (75.8%)
Unknown0 (0.0%)
Required8 (24.2%)
Privileges Required
Low7 (21.2%)
High6 (18.2%)
None20 (60.6%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (33 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
4 CVEs
12.1% of CVEs· 76th percentile

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Joomsky.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Joomsky — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Joomsky's Products

View all 3 CNAs →

Top CWEs