Lucene search
HistoryJun 21, 2023 - 2:15 p.m.
CVE-2023-27429
cve-2023-27429
authentication
stored cross-site scripting
automattic
jetpack crm
plugin
version 5.4.4
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
18.0%
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Automattic - Jetpack CRM team Jetpack CRM plugin <= 5.4.4 versions.
Affected configurations
Node
automatticjetpack_crmRange<5.5.0wordpress
Related
cve
cve
CVE-2023-27429
2023-06-21 14:15:09
prion
prion
Cross site scripting
2023-06-21 14:15:00
cvelist
cvelist
wpvulndb
wpvulndb
Jetpack CRM < 5.5.0 - Admin+ Stored XSS
2023-03-05 00:00:00
wordfence
wordfence
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
18.0%
Related for NVD:CVE-2023-27429