CVE-2026-57383
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
The JobSearch WordPress plugin (versions up to 3.2.9) contains a stored XSS vulnerability. Improper input neutralization during web page generation allows an attacker to inject a malicious script.
Risk Assessment
An attacker can inject a persistent script that executes in the browsers of administrators and users, potentially leading to session theft, account takeover, or website defacement.
Recommendation
Immediately update the JobSearch plugin to version 3.3.0 or later, which includes a fix for this vulnerability.
Other vulnerabilities in JobSearch
See all- CVE-2026-54186Critical
In JobSearch versions up to 3.2.9, there is an unauthenticated SQL Injection vulnerability that can be exploited by an attacker to execute unauthorized queries against the database.
- CVE-2026-49057High
JobSearch versions up to 3.2.7 contain a vulnerability in access control that allows unauthorized access to resources.
Original NVD description (English source)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eyecix JobSearch wp-jobsearch allows Stored XSS.This issue affects JobSearch: from n/a through <= 3.2.9.