The eyecix Addon Jobsearch Chat addon (versions up to 3.0) contains an SQL Injection vulnerability caused by improper neutralization of special elements used in SQL commands. This allows remote attackers to execute crafted SQL queries without authentication or user interaction, potentially leading to unauthorized disclosure of sensitive data and partial denial of service. The vulnerability is rated critical with a CVSS 3.1 base score of 9.3, reflecting its high impact and ease of exploitation. No patch or official remediation information is currently provided.

Successful exploitation can lead to unauthorized disclosure of sensitive information (confidentiality impact is high) and partial denial of service (availability impact is low). Integrity impact is not indicated. The vulnerability can be exploited remotely without authentication or user interaction, increasing its risk profile. No known exploits in the wild have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the vulnerable addon and monitor for unusual database activity. Avoid exposing the addon to untrusted networks. Follow vendor communications for updates on patches or mitigations.