When a something was redirected, the URL should be escaped against HTML attributes that could result to an XSS attack.
This vulnerability affects the following application versions:
- Jetpack 3.0
- Jetpack 3.0.1
- Jetpack 3.0.2
- Jetpack 3.0.2b1
- Jetpack 3.0.2b2
- Jetpack 3.0.4
- Jetpack 3.0.5
- Jetpack 3.0.6
- Jetpack 3.1
- Jetpack 3.1.1
- Jetpack 3.1.3
- Jetpack 3.1.4
- Jetpack 3.1.5
- Jetpack 3.2
- Jetpack 3.2.1
- Jetpack 3.2.3
- Jetpack 3.2.4
- Jetpack 3.2.5
- Jetpack 3.3
- Jetpack 3.3.1
- Jetpack 3.3.2
- Jetpack 3.3.4
- Jetpack 3.3.5
- Jetpack 3.3.6
- Jetpack 3.4.1
- Jetpack 3.4.2
- Jetpack 3.4.3
- Jetpack 3.4.4
- Jetpack 3.4.5
- Jetpack 3.4.6
- Jetpack 3.5
- Jetpack 3.5.1
- Jetpack 3.5.2
- Jetpack 3.5.3
- Jetpack 3.5.4
- Jetpack 3.5.5
- Jetpack 3.5.6
- Jetpack 3.6.1
- Jetpack 3.6.2
- Jetpack 3.6.3
- Jetpack 3.6.4
- Jetpack 3.7
- Jetpack 3.7.1
- Jetpack 3.7.2
- Jetpack 3.7.3
- Jetpack 3.7.4
- Jetpack 3.7.5
- Jetpack 3.8.0