Jetpack 2.0-4.0.2 - Shortcode Stored Cross-Site Scripting (XSS)

2016-05-2600:00:00

ethicalhack3r

wpscan.com

EPSS

0.001

Percentile

30.3%

JSON

The Jetpack – WP Security, Backup, Speed, & Growth WordPress plugin was affected by a Shortcode Stored Cross-Site Scripting (XSS) security vulnerability.

References

wptavern.com/jetpack-4-0-3-patches-a-critical-xss-vulnerability

blog.sucuri.net/2016/05/security-advisory-stored-xss-jetpack-2.html

jetpack.com/2016/05/27/jetpack-4-0-3-critical-security-update/

EPSS

0.001

Percentile

30.3%

JSON

Related for WPVDB-ID:957AB0B9-2ACB-4F46-93E6-30AD4FCB7FEF