CVE-2023-54332 — Jetpack 11.4 - Cross Site Scripting (XSS)
Jetpack 11.4 contains a cross-site scripting vulnerability in the contact form module that allows attackers to inject malicious scripts through the post_id parameter. Attackers …
Published: 2026-01-13 · CVSS: 5.1 · CVSS 4.0
Jetpack 11.4 contains a cross-site scripting vulnerability in the contact form module that allows attackers to inject malicious scripts through the post_id parameter. Attackers can craft malicious URLs with script payloads to execute arbitrary JavaScript in victims' browsers when they interact with the contact form page.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7