Approved changes feed: RSS · Atom

cpe:2.3:a:automattic:jetpack_boost:9.1:*:*:*:*:*:*:*

part: a version: 9.1 update: *

VendorAutomattic (1dc39c9b-4ddb-5af6-acf4-410b436129a9)
ProductJetpack Boost (0207b3b5-bc2f-5ffb-9d91-5b4fae5e5ead)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-50958 vulnerable 2026-06-03 14:48:45.183624 WordPress Plugin Jetpack 9.1 Cross Site Scripting via grunion-form-view.php
MEDIUM (6.1)
WordPress Plugin Jetpack 9.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the post_id parameter. Attackers can craft URLs to the grunion-form-view.php endpoint with script payloads in the post_id parameter to execute arbitrary JavaScript in victim browsers.
Published: 2026-05-10T12:12:52.940Z
Updated: 2026-05-24T01:37:27.380Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.