PT-2026-27927 · Unknown · Eyecix Addon Jobsearch Chat

CVE-2026-25376 · Publicado 2026-03-25 · Atualizado 2026-04-07

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions eyecix Addon Jobsearch Chat versions through 3.0

Description The software contains a flaw related to improper input handling during web page generation, which allows for Reflected Cross-Site Scripting (XSS). This issue impacts the Addon Jobsearch Chat. The flaw allows for the injection of malicious scripts into web pages, potentially compromising user data or system security.

Recommendations Update eyecix Addon Jobsearch Chat to a version newer than 3.0.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-25376

Produtos afetados

Eyecix Addon Jobsearch Chat

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-25376 · Nota de Segurança
• https://twitter.com/CVEnew/status/2038516993968787867 · Publicação no Twitter
• https://twitter.com/atomicedgeWAF/status/2041463509226062014 · Publicação no Twitter
• https://patchstack.com/database/Wordpress/Plugin/addon-jobsearch-chat/vulnerability/wordpress-addon-jobsearch-chat-plugin-3-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve · Nota