PT-2026-27927 · Unknown · Eyecix Addon Jobsearch Chat

Published 2026-03-25 · Updated 2026-04-07 · CVE-2026-25376

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions eyecix Addon Jobsearch Chat versions through 3.0

Description The software contains a flaw related to improper input handling during web page generation, which allows for Reflected Cross-Site Scripting (XSS). This issue impacts the Addon Jobsearch Chat. The flaw allows for the injection of malicious scripts into web pages, potentially compromising user data or system security.

Recommendations Update eyecix Addon Jobsearch Chat to a version newer than 3.0.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-25376

Affected Products

Eyecix Addon Jobsearch Chat

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-25376 · Security Note
• https://twitter.com/CVEnew/status/2038516993968787867 · Twitter Post
• https://twitter.com/atomicedgeWAF/status/2041463509226062014 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/addon-jobsearch-chat/vulnerability/wordpress-addon-jobsearch-chat-plugin-3-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve · Note