CVE-2023-54332: Jetpack 11.4 - Cross Site Scripting (XSS)
Jetpack 11.4 contains a cross-site scripting vulnerability in the contact form module that allows attackers to inject malicious scripts through the postid parameter. Attackers can craft malicious URLs with script payloads to execute arbitrary JavaScript in victims' browsers when they interact with the contact form page.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-54332?
CVE-2023-54332 is classified as a high severity vulnerability due to its cross-site scripting (XSS) implications.
How do I fix CVE-2023-54332?
To fix CVE-2023-54332, update Jetpack to the latest version provided by Automattic.
What impact does CVE-2023-54332 have on affected systems?
CVE-2023-54332 allows attackers to inject malicious JavaScript into web pages through vulnerable Jetpack installations.
Which versions of Jetpack are affected by CVE-2023-54332?
CVE-2023-54332 affects Jetpack version 11.4 and earlier releases.
How can I identify if my site is vulnerable to CVE-2023-54332?
You can identify vulnerability to CVE-2023-54332 by checking if you are using Jetpack version 11.4 or earlier and reviewing the usage of the contact form module.