Automattic Jetpack Crm
4 CVEs affecting Automattic Jetpack Crm. Latest disclosed: 2023-10-20. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-3342 | High | 7.5 | 2023-10-20 | The Jetpack CRM plugin for WordPress is vulnerable to PHAR deserialization via the ‘zbscrmcsvimpf’ parameter in the 'zeroBSCRM_CSVImporterLitehtml_app' functio… |
CVE-2023-27429 | Medium | 5.9 | 2023-06-21 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Automattic - Jetpack CRM team Jetpack CRM plugin <= 5.4.4 versions. |
CVE-2022-4497 | Medium | 5.4 | 2023-01-09 | The Jetpack CRM WordPress plugin before 5.5 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could… |
CVE-2022-3919 | Medium | 4.8 | 2022-12-12 | The Jetpack CRM WordPress plugin before 5.4.3 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scri… |