Jetpack – WP Security, Backup, Speed, & Growth, CVE-2023-54332

CVE, Research URL: CVE-2023-54332
Home page URL: Security reports for Jetpack – WP Security, Backup, Speed, & Growth
Application: Jetpack – WP Security, Backup, Speed, & Growth
Published on: Jan 14, 2026
Research Description: Jetpack 11.4 contains a cross-site scripting vulnerability in the contact form module that allows attackers to inject malicious scripts through the post_id parameter. Attackers can craft malicious URLs with script payloads to execute arbitrary JavaScript in victims' browsers when they interact with the contact form page.
Affected versions: max 11.4.
Status: vulnerable