The network admin url was not properly escaped against HTML tags that could result in an XSS attack.
This vulnerability affects the following application versions:
- Jetpack 3.6.1
- Jetpack 3.6.2
- Jetpack 3.6.3
- Jetpack 3.6.4
- Jetpack 3.7
- Jetpack 3.7.1
- Jetpack 3.7.2
- Jetpack 3.7.3
- Jetpack 3.7.4
- Jetpack 3.7.5
- Jetpack 3.8.1
- Jetpack 3.8.2
- Jetpack 3.8.3
- Jetpack 3.8.4
- Jetpack 3.8.5
- Jetpack 3.9.0
- Jetpack 3.9.1
- Jetpack 3.9.2
- Jetpack 3.9.3
- Jetpack 3.9.4
- Jetpack 3.9.5
- Jetpack 3.9.6
- Jetpack 3.9.7
- Jetpack 3.9.8
- Jetpack 3.9.9
- Jetpack 3.9.10
- Jetpack 4.0.0
- Jetpack 4.0.1
- Jetpack 4.0.2
- Jetpack 4.0.3