CVE-2023-54332Jetpack 11.4 - Cross Site Scripting (XSS)

Açıklama

Jetpack 11.4 contains a cross-site scripting vulnerability in the contact form module that allows attackers to inject malicious scripts through the post_id parameter. Attackers can craft malicious URLs with script payloads to execute arbitrary JavaScript in victims' browsers when they interact with the contact form page.

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Kaynaklar ve yamalar

• ExploitDB-51104 exploitExploitThird Party Advisory
• Jetpack WordPress Plugin Homepage productProduct
• VulnCheck Advisory: Jetpack 11.4 - Cross Site Scripting (XSS) third-party-advisoryThird Party Advisory