Jetpack – WP Security, Backup, Speed, & Growth, d0e43e57b78d7c62d3889e9cfbe510dd852a313a

CVE, Research URL: d0e43e57b78d7c62d3889e9cfbe510dd852a313a
Home page URL: Security reports for Jetpack – WP Security, Backup, Speed, & Growth
Application: Jetpack – WP Security, Backup, Speed, & Growth
Published on: Feb 25, 2016
Research Description: Jetpack – WP Security, Backup, Speed, & Growth [jetpack] < 3.9.2 Jetpack – WP Security, Backup, Speed, & Growth <= 3.9.1 - Cross-Site Scripting via LaTeX markup within HTML elements The Jetpack – WP Security, Backup, Speed, & Growth plugin for WordPress is vulnerable to Cross-Site Scripting via LaTeX markup within HTML elements in versions up to, and including, 3.9.1 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts that execute in a victim's browser.
Affected versions: max 3.9.2.
Status: vulnerable