CVE-2026-32493 — Cross-site Scripting in Jobsearch

CWE-79 — Cross-site Scripting4 documents4 sources
Severity
9.8CRITICAL
No vector
EPSS
0.0%
top 88.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Eyecix Jobsearch
Timeline
PublishedMar 25

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eyecix JobSearch wp-jobsearch allows Reflected XSS.This issue affects JobSearch: from n/a through <= 3.2.0.

Affected Packages1 packages

▶CVEListV5eyecix/jobsearchn/a — <= 3.2.0

🔴Vulnerability Details

2
GHSA
GHSA-j8cr-494c-qv6f: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eyecix JobSearch wp-jobsearch allows Reflected X↗2026-03-25
▶
CVEList
WordPress JobSearch plugin <= 3.2.0 - Reflected Cross Site Scripting (XSS) vulnerability↗2026-03-25
▶

🕵️Threat Intelligence

1
Wiz
CVE-2026-32493 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶
CVE-2026-32493 — Cross-site Scripting in Jobsearch | cvebase