5.1
Moyenne
CVE-2023-54332 Jetpack 11.4 contains a cross-site scripting vulnerability in the contact form module that allows attackers to inject…
Description
Jetpack 11.4 contains a cross-site scripting vulnerability in the contact form module that allows attackers to inject malicious scripts through the post_id parameter. Attackers can craft malicious URLs with script payloads to execute arbitrary JavaScript in victims' browsers when they interact with the contact form page.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Jetpack | 11.4 | Pas de correctif indiqué |
Autres CVE de Jetpack
Les 6 CVE de Jetpack →
CVE-2026-106602
Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password…
4.8
Moyenne
CVE-2026-106601
Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password…
5.4
Moyenne
CVE-2024-9926
The Jetpack WordPress plugin does not have proper authorisation in one of its REST endpoint, allowing any…
4.3
Moyenne
CVE-2023-47788
Missing Authorization vulnerability in Automattic Jetpack.This issue affects Jetpack: from n/a before 12.7
4.3
Moyenne