PT-2023-13312

Name of the Vulnerable Software and Affected Versions Jetpack CRM plugin for WordPress versions up to, and including, 5.3.1 Description The issue concerns PHAR deserialization via the zbscrmcsvimpf parameter in the zeroBSCRM CSVImporterLitehtml app function. Although a nonce check is performed,...