The port number during sign request wasn’t properly escaped against XSS.
This vulnerability affects the following application versions:
- Jetpack 8.0
- Jetpack 8.0.1
- Jetpack 8.0.2
- Jetpack 8.0.3
- Jetpack 8.0-beta
- Jetpack 8.1
- Jetpack 8.1.1
- Jetpack 8.1.2
- Jetpack 8.1.3
- Jetpack 8.1.4
- Jetpack 8.1-beta
- Jetpack 8.2
- Jetpack 8.2.0.1
- Jetpack 8.2.1
- Jetpack 8.2.2
- Jetpack 8.2.3
- Jetpack 8.2.4
- Jetpack 8.2.5
- Jetpack 8.2.6
- Jetpack 8.2-alpha
- Jetpack 8.2-beta2
- Jetpack 8.3
- Jetpack 8.3.1
- Jetpack 8.3.2
- Jetpack 8.3.3
- Jetpack 8.3-beta1
- Jetpack 8.3-beta2
- Jetpack 8.4
- Jetpack 8.4.1
- Jetpack 8.4.2
- Jetpack 8.4.3
- Jetpack 8.4.4
- Jetpack 8.4.5
- Jetpack 8.4-beta
- Jetpack 8.5
- Jetpack 8.5.1
- Jetpack 8.5.2
- Jetpack 8.5.3
- Jetpack 8.5-beta
- Jetpack 8.6
- Jetpack 8.6.1
- Jetpack 8.6.2
- Jetpack 8.6.3
- Jetpack 8.6.4
- Jetpack 8.6-beta
- Jetpack 8.6-beta2
- Jetpack 8.7
- Jetpack 8.7.0.1
- Jetpack 8.7.1
- Jetpack 8.7.2
- Jetpack 8.7.3
- Jetpack 8.7.4
- Jetpack 8.7-beta
- Jetpack 8.8
- Jetpack 8.8.1
- Jetpack 8.8.2
- Jetpack 8.8.3
- Jetpack 8.8.4
- Jetpack 8.8.5
- Jetpack 8.8-alpha
- Jetpack 8.8-beta
- Jetpack 8.8-beta2
- Jetpack 8.9
- Jetpack 8.9.1
- Jetpack 8.9.2
- Jetpack 8.9.3
- Jetpack 8.9.4
- Jetpack 8.9-beta
- Jetpack 8.9-beta2
- Jetpack 9.0
- Jetpack 9.0.1
- Jetpack 9.0.2
- Jetpack 9.0.2.1
- Jetpack 9.0.3
- Jetpack 9.0.4
- Jetpack 9.0.5
- Jetpack 9.0-beta
- Jetpack 9.1
- Jetpack 9.1.1
- Jetpack 9.1.2
- Jetpack 9.1.3