Jetpack – WP Security, Backup, Speed, & Growth, cc9326052e5e086b429a42db7048d509aabde351

CVE, Research URL: cc9326052e5e086b429a42db7048d509aabde351
Home page URL: Security reports for Jetpack – WP Security, Backup, Speed, & Growth
Application: Jetpack – WP Security, Backup, Speed, & Growth
Published on: Oct 01, 2015
Research Description: Jetpack – WP Security, Backup, Speed, & Growth [jetpack] < 3.7.2 Jetpack <= 3.7.1 - Stored Cross-Site Scripting Jetpack versions 3.7.0 and earlier are vulnerable to a Cross-Site Scripting vulnerability in the contact form due to improper input sanitization. This allows an unauthenticated attacker to inject JavaScript into the contact form that can potentially execute in a site administrators browser.
Affected versions: max 3.7.2.
Status: vulnerable