Escaping of HTML attributes and checking user permission

Not properly escaped HTML attributes could result in an XSS attack.

This vulnerability affects the following application versions:

• Jetpack 2.7
• Jetpack 2.8
• Jetpack 2.8b1
• Jetpack 2.9
• Jetpack 2.9.1
• Jetpack 2.9.1b1
• Jetpack 2.9.2
• Jetpack 2.9.3
• Jetpack 2.9.4
• Jetpack 2.9.5
• Jetpack 2.9.6
• Jetpack 2.9b1
• Jetpack 2.9b2
• Jetpack 2.9b3
• Jetpack 2.9b4
• Jetpack 3.0
• Jetpack 3.0.1
• Jetpack 3.0.2
• Jetpack 3.0.2b1
• Jetpack 3.0.2b2
• Jetpack 3.0.4
• Jetpack 3.0.5
• Jetpack 3.0.6
• Jetpack 3.1
• Jetpack 3.1.1
• Jetpack 3.1.3
• Jetpack 3.1.4
• Jetpack 3.1.5
• Jetpack 3.2
• Jetpack 3.2.1
• Jetpack 3.2.3
• Jetpack 3.2.4
• Jetpack 3.2.5
• Jetpack 3.3
• Jetpack 3.3.1
• Jetpack 3.3.2
• Jetpack 3.3.4
• Jetpack 3.3.5
• Jetpack 3.3.6
• Jetpack 3.4
• Jetpack 3.4.1
• Jetpack 3.4.2
• Jetpack 3.4.3
• Jetpack 3.4.4
• Jetpack 3.4.5
• Jetpack 3.4.6
• Jetpack 3.5
• Jetpack 3.5.1
• Jetpack 3.5.2
• Jetpack 3.5.3
• Jetpack 3.5.4
• Jetpack 3.5.5
• Jetpack 3.5.6
• Jetpack 3.6
• Jetpack 3.6.1
• Jetpack 3.6.2
• Jetpack 3.6.3
• Jetpack 3.6.4