Escaping HTML tags in the post widget to prevent XSS

Skrevet den 3. maj 2019 af i Jetpack

PHP Object Injection via Unsafe Deserialization of POST Parameters in Formidable Forms

6. november 2026

Formidable Forms passed every POST…

Læs mere »

Authenticated Local File Inclusion in RTMKit get_content AJAX Action

6. november 2026

RTMKit's get_content AJAX action built…

Læs mere »

SQL Injection in Form Maker by 10Web Submissions Sorting

6. november 2026

Form Maker by 10Web concatenated…

Læs mere »

Post widget could be exposed to an XSS attack due to unescaped HTML tags.

This vulnerability affects the following application versions:

Jetpack 3.9.0
Jetpack 3.9.1

Skriv et svar Annuller svar

Om os

Standoutmedia er et webbureau dedikeret til WordPress platformen.
Vi driver egne hostingløsninger, hvor tusindvis af kunder hver dag modtager sikkerhedsopdateringer.

Læs mere om os her: https://standoutmedia.dk/