4.8
CVSSv3

CVE-2022-3919

Published: 12/12/2022 Updated: 07/11/2023
CVSS v3 Base Score: 4.8 | Impact Score: 2.7 | Exploitability Score: 1.7
VMScore: 0

Vulnerability Summary

The Jetpack CRM WordPress plugin prior to 5.4.3 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

automattic jetpack crm