CVE-2023-27429: automattic jetpack crm – CVSS 4.8 · Watchpost

← All vulnerabilities

CVE-2023-27429

보통 4.8CVE-2023-27429 · Published 21/06/2023 · updated 17/06/2026

요약

CVE-2023-27429은(는) jetpack crm (automattic)에 영향을 주는 보통 (CVSS 4.8) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.40%, 전체 취약점의 33.8%보다 높음.
조치: 5.5.0 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
jetpack crm automattic	`< 5.5.0`	`5.5.0`

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Automattic - Jetpack CRM team Jetpack CRM plugin <= 5.4.4 versions.

References

patchstack.com/database/vulnerability/zero-bs-crm/wordpress-jetpack-crm-clients-leads-invoices-billing-email-marketing-automation-plugin-5-4-4-cross-site-scripting-xss · Third Party Advisory

jetpack crm의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free