Automattic: >> Jetpack Crm >> 5.4.3 Security Vulnerabilities
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Automattic - Jetpack CRM team Jetpack CRM plugin <= 5.4.4 versions.
CVSS Score
5.9
EPSS Score
0.001
Published
2023-06-21
The Jetpack CRM WordPress plugin before 5.5 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins
CVSS Score
5.4
EPSS Score
0.001
Published
2023-01-09