CVE-2023-54332 | Automattic Jetpack 11.4 Contact Form post_id cross site scripting (Exploit 51104 / EDB-51104)

January 14, 2026 Yanac

A vulnerability described as problematic has been identified in Automattic Jetpack 11.4. Affected by this issue is some unknown functionality of the component Contact Form Module. The manipulation of the argument post_id results in cross site scripting.

This vulnerability was named CVE-2023-54332. The attack may be performed from remote. In addition, an exploit is available.VulDB Recent EntriesRead More