CVE-2026-57368

The NooTheme Jobmonster plugin, versions up to 4.8.5, is vulnerable to reflected cross-site scripting (XSS) due to improper input neutralization during web page generation. This vulnerability could allow attackers to inject malicious scripts into web pages viewed by users, potentially leading to data theft or session hijacking. Organizations using affected versions of Jobmonster should prioritize patching this vulnerability to protect their users and maintain the integrity of their web applications.