CVE Database /
CVE-2022-4497
CVE · Medium
CVE-2022-4497 — Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation [zero-bs-crm] < 5.5
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-4497
|
Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation [zero-bs-crm] < 5.5 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
5.4
|
< 5.5
|
5.5 |
2022-12-19 |
—
|
CVE-2022-4497
The Jetpack CRM plugin before version 5.5 contains a cross-site scripting vulnerability that could enable attackers to inject malicious scripts into a website, potentially delivering redirects, advertisements, or other harmful HTML content to visitors. The flaw was discovered and reported by WPscan. Affected installations should be updated to version 5.5 or later to resolve this issue.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings