Medium severity · published May 14, 2024
CVE-2024-4392
The Jetpack – WP Security, Backup, Speed, & Growth plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpvideo shortcode in all versions up to, and…
5.4
CVSS
0.4%
EPSS
No
On KEV
Description
The Jetpack – WP Security, Backup, Speed, & Growth plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpvideo shortcode in all versions up to, and including, 13.3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JE
Jetpack · Automattic
before 13.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-4392
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-4392
Product
https://plugins.trac.wordpress.org/browser/jetpack/tags/13.3.1/modules/videopress/class.videopress-player.php#L335
Third Party Advisory
https://www.wordfence.com/threat-intel/vulnerabilities/id/11dceac7-7ff8-4384-9046-919c38947c32?source=cve
More from Jetpack
8.8
CVE-2023-47788
WordPress Jetpack plugin < 12.7 - Contributor+ Broken Access Control vulnerability
8.8
CVE-2023-2996
The Jetpack WordPress plugin before 12.1.1 does not validate uploaded files, allowing users with author roles or above to manipulate existing files on the site, deleting arbitrary…
6.1
CVE-2023-54332
Jetpack 11.4 - Cross Site Scripting (XSS)
6.1
CVE-2024-10858
Jetpack 13.0-14.0 - Unauthenticated DOM-XSS
6.1
CVE-2015-9359
The Jetpack plugin before 3.4.3 for WordPress has XSS via add_query_arg() and remove_query_arg()