Jetpack – WP Security, Backup, Speed, & Growth, bfed3099-bd41-4988-a76b-2b9349051879

CVE, Research URL: bfed3099-bd41-4988-a76b-2b9349051879
Home page URL: Security reports for Jetpack – WP Security, Backup, Speed, & Growth
Application: Jetpack – WP Security, Backup, Speed, & Growth
Published on: -
Research Description: Jetpack – WP Security, Backup, Speed, & Growth [jetpack] < 13.2.1 Jetpack < 13.2.1 - Contributor+ Stored XSS The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
Affected versions: max 13.2.1.
Status: vulnerable