This vulnerability (CVE-2026-57336) is an unauthenticated Cross-Site Scripting (XSS) issue in Astoundify Jobify affecting versions up to and including 4.3.2. It is classified under CWE-79, indicating improper neutralization of input during web page generation. The CVSS 3.1 base score is 7.1, reflecting a high severity with network attack vector, low attack complexity, no privileges required, and requiring user interaction. The vulnerability impacts confidentiality, integrity, and availability with a scope change. No known exploits in the wild or vendor patches have been reported as of the published date.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to execute arbitrary scripts in the context of the victim's browser, potentially leading to partial disclosure of sensitive information, modification of web content, and disruption of service availability. The CVSS vector indicates a high impact on confidentiality, integrity, and availability with a scope change.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying temporary mitigations such as input validation and output encoding on affected inputs if possible. Monitor vendor channels for updates and patches.