Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation vulnerabilities
1 known vulnerability in Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation from Automattic. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest first
- 8.8 High severity
Jetpack CRM – Clients, Leads, Invoices…: Deserialization of Untrusted Data
The Jetpack CRM plugin for WordPress is vulnerable to PHAR deserialization via the ‘zbscrmcsvimpf’ parameter in the 'zeroBSCRM_CSVImporterLitehtml_app' function in versions up to, and including, 5.3.1. While the function performs a nonce check, steps 2 and 3 o