CVE-2025-67633

Name of the Vulnerable Software and Affected Versions Greenhouse Job Board versions prior to 2.7.4

Description Insufficient input sanitization and output escaping allow for DOM-Based and Stored Cross-Site Scripting (XSS), a condition where malicious scripts are injected into web pages. This issue specifically affects multi-site installations and environments where unfiltered html has been disabled. Authenticated attackers with administrator-level access or higher can inject arbitrary web scripts that execute when a user visits the affected page.

Recommendations Update Greenhouse Job Board to version 2.7.4 or later.