Jetpack – WP Security, Backup, Speed, & Growth, dad3ea5b-2420-4022-b26d-769f63ed01e7

CVE, Research URL: dad3ea5b-2420-4022-b26d-769f63ed01e7
Home page URL: Security reports for Jetpack – WP Security, Backup, Speed, & Growth
Application: Jetpack – WP Security, Backup, Speed, & Growth
Published on: -
Research Description: Jetpack – WP Security, Backup, Speed, & Growth [jetpack] < 3.7.1 Jetpack <= 3.7.0 - Stored Cross-Site Scripting (XSS) Jetpack versions 3.7.0 and earlier are vulnerable to a cross-site scripting vulnerability in the contact form due to improper input sanitization. Reported by Marc-Alexandre Montpas from Sucuri.
Affected versions: max 3.7.1.
Status: vulnerable