The vulnerability CVE-2025-67633 in the brownbagmarketing Greenhouse Job Board product (versions up to 2.7.3) is a DOM-based Cross-site Scripting (XSS) issue resulting from improper neutralization of input during web page generation. This allows an attacker with high privileges and requiring user interaction to inject and execute malicious scripts within the context of the affected web application. The CVSS v3.1 base score is 5.9 (medium severity) with network attack vector, low attack complexity, high privileges required, user interaction required, and impacts on confidentiality, integrity, and availability classified as low to low to low respectively. The vulnerability is published and reserved under Patchstack but no patch or vendor advisory is currently provided.

Successful exploitation of this DOM-based XSS vulnerability could allow an attacker with high privileges and user interaction to execute arbitrary scripts in the context of the affected application, potentially leading to partial compromise of confidentiality, integrity, and availability of the system or user data. However, the impact is rated medium severity with limited scope due to the requirement for high privileges and user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should be cautious with input handling and consider applying any recommended temporary mitigations from the vendor once published. No official patch or workaround information is currently provided.