Jetpack – WP Security, Backup, Speed, & Growth, a8073510758ddc46d88dbae64b770262e9ef8de3

CVE, Research URL: a8073510758ddc46d88dbae64b770262e9ef8de3
Home page URL: Security reports for Jetpack – WP Security, Backup, Speed, & Growth
Application: Jetpack – WP Security, Backup, Speed, & Growth
Published on: Oct 19, 2019
Research Description: Jetpack – WP Security, Backup, Speed, & Growth [jetpack] <= 7.9 Jetpack <= 7.9 - Stored Cross-Site Scripting The Jetpack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a shortcode in versions up to, and including, 7.9. This makes it possible for medium-level authenticated attackers to inject arbitrary web scripts in administrative pages and posts that execute whenever a user accesses the page with the stored web scripts.
Affected versions: max 7.9.
Status: vulnerable