Is CVE-2018-25327 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2018-25327 being exploited in the wild.

How severe is CVE-2018-25327?

Medium severity, with a CVSS score of 5.3, published 17 May 2026.

Which products and versions are affected?

JoomSky JS Jobs 1.2.0 and earlier.

Is there a fix for CVE-2018-25327?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2018-25327 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2018-25327?

Check whether you run JoomSky JS Jobs at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2018-25327: JoomSky Js Jobs CSRF in administrative endpoints

CVE-2018-25327 · Severity: medium · CVSS 5.3 · Published 2026-05-17

Js Jobs is a recruitment and job board extension for the Joomla content management system. A security flaw in version 1.2.0 allows attackers to trick an administrator into performing unintended actions, such as deleting job listings or changing system settings, by simply visiting a malicious website. This could lead to unauthorized data loss or disruption of the job board service.

Technologies: JoomSky JS Jobs. Vendors: JoomSky.

Quick answers

Is CVE-2018-25327 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2018-25327 being exploited in the wild.
How severe is CVE-2018-25327?: Medium severity, with a CVSS score of 5.3, published 17 May 2026.
Which products and versions are affected?: JoomSky JS Jobs 1.2.0 and earlier.
Is there a fix for CVE-2018-25327?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2018-25327 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2018-25327?: Check whether you run JoomSky JS Jobs at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A Cross-Site Request Forgery (CSRF) vulnerability exists in the JoomSky Js Jobs component (version 1.2.0 and earlier) for Joomla. The application fails to implement or validate anti-CSRF tokens for state-changing administrative functions. An unauthenticated remote attacker can exploit this by crafting a malicious HTML page that, when visited by an authenticated administrator, triggers hidden requests to endpoints such as 'job.jobenforcedelete'. Successful exploitation allows the attacker to delete job entries or modify component configurations. The vulnerability was addressed in version 1.2.1.

Affected products

JoomSky Js Jobs 1.2.0 and earlier

Timeline

2018-04-17: disclosed: Initial discovery and exploit publication by Sureshbabu Narvaneni
2018-04-18: other: Exploit-DB entry published
2026-05-17: advisory: CVE record published/updated in NVD

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.