The eyecix JobSearch WordPress plugin contains a Stored Cross-site Scripting vulnerability due to improper input neutralization during web page generation. This allows attackers to inject malicious scripts that are stored and later executed in the context of users visiting the affected site. The issue affects all versions up to and including 3.2.9. The CVSS 3.1 vector indicates the vulnerability is remotely exploitable over the network without privileges, requires user interaction, and impacts confidentiality, integrity, and availability to a limited extent. No vendor advisory or patch information is currently available, and no known exploits have been reported.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of the victim's browser, potentially leading to theft of user credentials, session hijacking, or other malicious actions affecting confidentiality, integrity, and availability. The CVSS score of 7.1 reflects a high impact with user interaction required and scope change.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or limiting use of the affected plugin version. Implementing web application firewalls or input filtering may provide some protection, but these are not substitutes for an official patch.