Vulnerabilidades de Jetpack
CVEs publicadas que afetam produtos de Jetpack: 1 registro(s), com severidade, exploração e correções.
CVE-2022-50958
Média · 6.1
CWE-79 10/05/2026
WordPress Plugin Jetpack 9.1 Cross Site Scripting via grunion-form-view.php
WordPress Plugin Jetpack 9.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the post_id parameter. Attackers can craft URLs to the grunion-form-view.php endpoint with script payloads in the post_id parameter to execute arbitrary JavaScript in victim browsers.