Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation, CVE-2023-27429

CVE, Research URL: CVE-2023-27429
Home page URL: Security reports for Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation
Application: Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation
Published on: Jun 21, 2023
Research Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Automattic - Jetpack CRM team Jetpack CRM plugin <= 5.4.4 versions.
Affected versions: max 5.5.0.
Status: vulnerable

Jetpack CRM &#8211; Clients, Leads, Invoices, Billing, Email Marketing, &amp; Automation, CVE-2023-27429