Insufficient validation and escaping some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
This vulnerability affects the following application versions:
- Jetpack 10.0
- Jetpack 10.0.1
- Jetpack 10.0.2
- Jetpack 10.0-beta
- Jetpack 10.1
- Jetpack 10.1.1
- Jetpack 10.1.2
- Jetpack 10.1-beta
- Jetpack 10.2
- Jetpack 10.2.1
- Jetpack 10.2.2
- Jetpack 10.2.3
- Jetpack 10.2-beta
- Jetpack 10.3
- Jetpack 10.3.1
- Jetpack 10.3.2
- Jetpack 10.3-2110.1
- Jetpack 10.3-a.1
- Jetpack 10.3-a.3
- Jetpack 10.3-beta
- Jetpack 10.4
- Jetpack 10.4.1
- Jetpack 10.4.2
- Jetpack 10.4-a.1
- Jetpack 10.4-a.3
- Jetpack 10.4-a.5
- Jetpack 10.4-a.7
- Jetpack 10.4-a.9
- Jetpack 10.4-beta
- Jetpack 10.5
- Jetpack 10.5.1
- Jetpack 10.5.2
- Jetpack 10.5.3
- Jetpack 10.5-a.1
- Jetpack 10.5-a.3
- Jetpack 10.5-beta
- Jetpack 10.6
- Jetpack 10.6.1
- Jetpack 10.6.2
- Jetpack 10.6-a.1
- Jetpack 10.6-a.3
- Jetpack 10.6-beta
- Jetpack 10.7
- Jetpack 10.7.1
- Jetpack 10.7.2
- Jetpack 10.7-a.1
- Jetpack 10.7-a.3
- Jetpack 10.7-a.5
- Jetpack 10.7-beta
- Jetpack 10.7-beta2
- Jetpack 10.7+vip.1
- Jetpack 10.8
- Jetpack 10.8.1
- Jetpack 10.8.2
- Jetpack 10.8-a.1
- Jetpack 10.8-a.3
- Jetpack 10.8-a.5
- Jetpack 10.8-a.7
- Jetpack 10.8-a.9
- Jetpack 10.8-a.9.2
- Jetpack 10.8-beta
- Jetpack 10.8-beta2
- Jetpack 10.9
- Jetpack 10.9.1
- Jetpack 10.9.2
- Jetpack 10.9.3
- Jetpack 10.9-a.1
- Jetpack 10.9-a.3
- Jetpack 10.9-a.5
- Jetpack 10.9-a.7
- Jetpack 10.9-beta
- Jetpack 10.9-beta2
- Jetpack 11.0
- Jetpack 11.0.1
- Jetpack 11.0.2
- Jetpack 11.0-a.1
- Jetpack 11.0-a.11
- Jetpack 11.0-a.3
- Jetpack 11.0-a.5
- Jetpack 11.0-a.7
- Jetpack 11.0-a.9
- Jetpack 11.0-beta
- Jetpack 11.1
- Jetpack 11.1.1
- Jetpack 11.1.2
- Jetpack 11.1.3
- Jetpack 11.1.4
- Jetpack 11.1-a.1
- Jetpack 11.1-a.3
- Jetpack 11.1-a.5
- Jetpack 11.1-beta
- Jetpack 11.1-beta2
- Jetpack 11.2
- Jetpack 11.2.1
- Jetpack 11.2.2
- Jetpack 11.2-a.1
- Jetpack 11.2-a.3
- Jetpack 11.2-a.5
- Jetpack 11.2-beta
- Jetpack 11.3
- Jetpack 11.3.1
- Jetpack 11.3.2
- Jetpack 11.3.3
- Jetpack 11.3.4
- Jetpack 11.3-a.1
- Jetpack 11.3-a.11
- Jetpack 11.3-a.3
- Jetpack 11.3-a.5
- Jetpack 11.3-a.7
- Jetpack 11.3-a.9
- Jetpack 11.3-beta
- Jetpack 11.3-beta2
- Jetpack 11.3-beta3
- Jetpack 11.4
- Jetpack 11.4.1
- Jetpack 11.4.2
- Jetpack 11.4-a.1
- Jetpack 11.4-a.3
- Jetpack 11.4-a.5
- Jetpack 11.4-a.7
- Jetpack 11.4-beta
- Jetpack 11.5
- Jetpack 11.5.1
- Jetpack 11.5.2
- Jetpack 11.5.3
- Jetpack 11.5-a.1
- Jetpack 11.5-a.3
- Jetpack 11.5-a.5
- Jetpack 11.5-a.7
- Jetpack 11.5-a.9
- Jetpack 11.5-beta
- Jetpack 11.5-beta2
- Jetpack 11.5-beta3
- Jetpack 11.5-beta4
- Jetpack 11.6
- Jetpack 11.6.1
- Jetpack 11.6.2
- Jetpack 11.6-a.1
- Jetpack 11.6-a.3
- Jetpack 11.6-a.5
- Jetpack 11.6-beta
- Jetpack 11.7
- Jetpack 11.7.1
- Jetpack 11.7.2
- Jetpack 11.7.3
- Jetpack 11.7-a.1
- Jetpack 11.7-a.11
- Jetpack 11.7-a.3
- Jetpack 11.7-a.7
- Jetpack 11.7-a.9
- Jetpack 11.7-beta
- Jetpack 11.7-beta2
- Jetpack 11.7-beta3
- Jetpack 11.8
- Jetpack 11.8.1
- Jetpack 11.8.2
- Jetpack 11.8.3
- Jetpack 11.8.4
- Jetpack 11.8.5
- Jetpack 11.8.6
- Jetpack 11.8-a.1
- Jetpack 11.8-a.11
- Jetpack 11.8-a.13
- Jetpack 11.8-a.3
- Jetpack 11.8-a.5
- Jetpack 11.8-a.7
- Jetpack 11.8-a.9
- Jetpack 11.8-beta
- Jetpack 11.9
- Jetpack 11.9.1
- Jetpack 11.9.1+vip.1
- Jetpack 11.9.2
- Jetpack 11.9.3
- Jetpack 11.9-a.1
- Jetpack 11.9-a.3
- Jetpack 11.9-a.5
- Jetpack 11.9-beta
- Jetpack 12.0
- Jetpack 12.0.1
- Jetpack 12.0.2
- Jetpack 12.0.3
- Jetpack 12.0-a.1
- Jetpack 12.0-a.3
- Jetpack 12.0-a.5
- Jetpack 12.0-a.7
- Jetpack 12.0-beta
- Jetpack 12.1
- Jetpack 12.1.1
- Jetpack 12.1.2
- Jetpack 12.1.3
- Jetpack 12.1-a.1
- Jetpack 12.1-a.3
- Jetpack 12.1-a.5
- Jetpack 12.1-a.7
- Jetpack 12.1-beta
- Jetpack 12.1-beta2
- Jetpack 12.2
- Jetpack 12.2.1
- Jetpack 12.2.2
- Jetpack 12.2.3
- Jetpack 12.2-a.1
- Jetpack 12.2-a.11
- Jetpack 12.2-a.13
- Jetpack 12.2-a.15
- Jetpack 12.2-a.3
- Jetpack 12.2-a.5
- Jetpack 12.2-a.7
- Jetpack 12.2-a.9
- Jetpack 12.2-beta
- Jetpack 12.2-beta.2
- Jetpack 12.3
- Jetpack 12.3.1
- Jetpack 12.3.2
- Jetpack 12.3-a.1
- Jetpack 12.3-a.3
- Jetpack 12.3-a.5
- Jetpack 12.3-a.7
- Jetpack 12.3-beta
- Jetpack 12.4
- Jetpack 12.4.1
- Jetpack 12.4.2
- Jetpack 12.4-a.1
- Jetpack 12.4-a.3
- Jetpack 12.4-a.5
- Jetpack 12.4-a.7
- Jetpack 12.4-beta
- Jetpack 12.5
- Jetpack 12.5.1
- Jetpack 12.5.2
- Jetpack 12.5-a.1
- Jetpack 12.5-a.11
- Jetpack 12.5-a.5
- Jetpack 12.5-a.7
- Jetpack 12.5-a.9
- Jetpack 12.5-beta
- Jetpack 12.6
- Jetpack 12.6.1
- Jetpack 12.6.2
- Jetpack 12.6.3
- Jetpack 12.6.4
- Jetpack 12.6-a.1
- Jetpack 12.6-a.3
- Jetpack 12.6-a.5
- Jetpack 12.7
- Jetpack 12.7.1
- Jetpack 12.7.2
- Jetpack 12.7.3
- Jetpack 12.7-a.1
- Jetpack 12.7-a.3
- Jetpack 12.7-a.5
- Jetpack 12.7-a.7
- Jetpack 12.7-beta
- Jetpack 12.8
- Jetpack 12.8.1
- Jetpack 12.8.2
- Jetpack 12.8.3
- Jetpack 12.8-a.1
- Jetpack 12.8-a.11
- Jetpack 12.8-a.3
- Jetpack 12.8-a.5
- Jetpack 12.8-a.7
- Jetpack 12.8-a.9
- Jetpack 12.8-beta
- Jetpack 12.9
- Jetpack 12.9.1
- Jetpack 12.9.2
- Jetpack 12.9.3
- Jetpack 12.9.4
- Jetpack 12.9.5
- Jetpack 12.9-a.1
- Jetpack 12.9-a.11
- Jetpack 12.9-a.3
- Jetpack 12.9-a.5
- Jetpack 12.9-a.7
- Jetpack 12.9-a.9
- Jetpack 12.9-beta
- Jetpack 13.0
- Jetpack 13.0.1
- Jetpack 13.0.2
- Jetpack 13.0-a.1
- Jetpack 13.0-a.11
- Jetpack 13.0-a.13
- Jetpack 13.0-a.3
- Jetpack 13.0-a.5
- Jetpack 13.0-a.7
- Jetpack 13.0-a.9
- Jetpack 13.0-beta
- Jetpack 13.1
- Jetpack 13.1.1
- Jetpack 13.1.2
- Jetpack 13.1.3
- Jetpack 13.1.4
- Jetpack 13.1.5
- Jetpack 13.1-a.1
- Jetpack 13.1-a.3
- Jetpack 13.1-a.5
- Jetpack 13.1-a.7
- Jetpack 13.1-a.9
- Jetpack 13.1-beta
- Jetpack 13.2
- Jetpack 13.2-a.1
- Jetpack 13.2-a.11
- Jetpack 13.2-a.3
- Jetpack 13.2-a.5
- Jetpack 13.2-a.7
- Jetpack 13.2-a.9
- Jetpack 13.2-beta
- Jetpack 6.9
- Jetpack 6.9.1
- Jetpack 6.9.2
- Jetpack 6.9.3
- Jetpack 6.9.4
- Jetpack 7.0
- Jetpack 7.0.1
- Jetpack 7.0.2
- Jetpack 7.0.3
- Jetpack 7.0.4
- Jetpack 7.0.5
- Jetpack 7.0-beta
- Jetpack 7.0-beta2
- Jetpack 7.1
- Jetpack 7.1.1
- Jetpack 7.1.1.1
- Jetpack 7.1.2
- Jetpack 7.1.3
- Jetpack 7.1.4
- Jetpack 7.1.5
- Jetpack 7.1-beta
- Jetpack 7.1-beta2
- Jetpack 7.2
- Jetpack 7.2.1
- Jetpack 7.2.1.1
- Jetpack 7.2.2
- Jetpack 7.2.3
- Jetpack 7.2.4
- Jetpack 7.2.5
- Jetpack 7.2-beta1
- Jetpack 7.2-beta2
- Jetpack 7.2-beta3
- Jetpack 7.3
- Jetpack 7.3.0
- Jetpack 7.3.0.1
- Jetpack 7.3.1
- Jetpack 7.3.1.1
- Jetpack 7.3.2
- Jetpack 7.3.3
- Jetpack 7.3.4
- Jetpack 7.3.5
- Jetpack 7.3-beta1
- Jetpack 7.3-beta2
- Jetpack 7.4
- Jetpack 7.4.1
- Jetpack 7.4.2
- Jetpack 7.4.3
- Jetpack 7.4.4
- Jetpack 7.4.5
- Jetpack 7.4-beta
- Jetpack 7.5
- Jetpack 7.5.0.1
- Jetpack 7.5.0.1-beta2
- Jetpack 7.5.1
- Jetpack 7.5.1-beta
- Jetpack 7.5.2
- Jetpack 7.5.3
- Jetpack 7.5.3-beta
- Jetpack 7.5.4
- Jetpack 7.5.5
- Jetpack 7.5.6
- Jetpack 7.5.7
- Jetpack 7.5-beta
- Jetpack 7.5-beta-2
- Jetpack 7.5-beta-3
- Jetpack 7.5-beta-4
- Jetpack 7.5-beta-5
- Jetpack 7.5-beta-6
- Jetpack 7.5-beta-7
- Jetpack 7.6
- Jetpack 7.6.1
- Jetpack 7.6.2
- Jetpack 7.6.3
- Jetpack 7.6.4
- Jetpack 7.6-beta
- Jetpack 7.7
- Jetpack 7.7.1
- Jetpack 7.7.2
- Jetpack 7.7.3
- Jetpack 7.7.4
- Jetpack 7.7.5
- Jetpack 7.7.6
- Jetpack 7.7-beta
- Jetpack 7.7-beta2
- Jetpack 7.8
- Jetpack 7.8.1
- Jetpack 7.8.2
- Jetpack 7.8.3
- Jetpack 7.8.4
- Jetpack 7.8-beta
- Jetpack 7.9
- Jetpack 7.9.1
- Jetpack 7.9.2
- Jetpack 7.9.3
- Jetpack 7.9.4
- Jetpack 7.9-beta
- Jetpack 7.9-beta2
- Jetpack 7.9-beta3
- Jetpack 8.0
- Jetpack 8.0.1
- Jetpack 8.0.2
- Jetpack 8.0.3
- Jetpack 8.0-beta
- Jetpack 8.1
- Jetpack 8.1.1
- Jetpack 8.1.2
- Jetpack 8.1.3
- Jetpack 8.1.4
- Jetpack 8.1-beta
- Jetpack 8.2
- Jetpack 8.2.0.1
- Jetpack 8.2.1
- Jetpack 8.2.2
- Jetpack 8.2.3
- Jetpack 8.2.4
- Jetpack 8.2.5
- Jetpack 8.2.6
- Jetpack 8.2-alpha
- Jetpack 8.2-beta2
- Jetpack 8.3
- Jetpack 8.3.1
- Jetpack 8.3.2
- Jetpack 8.3.3
- Jetpack 8.3-beta1
- Jetpack 8.3-beta2
- Jetpack 8.4
- Jetpack 8.4.1
- Jetpack 8.4.2
- Jetpack 8.4.3
- Jetpack 8.4.4
- Jetpack 8.4.5
- Jetpack 8.4-beta
- Jetpack 8.5
- Jetpack 8.5.1
- Jetpack 8.5.2
- Jetpack 8.5.3
- Jetpack 8.5-beta
- Jetpack 8.6
- Jetpack 8.6.1
- Jetpack 8.6.2
- Jetpack 8.6.3
- Jetpack 8.6.4
- Jetpack 8.6-beta
- Jetpack 8.6-beta2
- Jetpack 8.7
- Jetpack 8.7.0.1
- Jetpack 8.7.1
- Jetpack 8.7.2
- Jetpack 8.7.3
- Jetpack 8.7.4
- Jetpack 8.7-beta
- Jetpack 8.8
- Jetpack 8.8.1
- Jetpack 8.8.2
- Jetpack 8.8.3
- Jetpack 8.8.4
- Jetpack 8.8.5
- Jetpack 8.8-alpha
- Jetpack 8.8-beta
- Jetpack 8.8-beta2
- Jetpack 8.9
- Jetpack 8.9.1
- Jetpack 8.9.2
- Jetpack 8.9.3
- Jetpack 8.9.4
- Jetpack 8.9-beta
- Jetpack 8.9-beta2
- Jetpack 9.0
- Jetpack 9.0.1
- Jetpack 9.0.2
- Jetpack 9.0.2.1
- Jetpack 9.0.3
- Jetpack 9.0.4
- Jetpack 9.0.5
- Jetpack 9.0-beta
- Jetpack 9.1
- Jetpack 9.1.1
- Jetpack 9.1.2
- Jetpack 9.1.3
- Jetpack 9.2
- Jetpack 9.2.1
- Jetpack 9.2.2
- Jetpack 9.2.3
- Jetpack 9.2.4
- Jetpack 9.2-beta2
- Jetpack 9.3
- Jetpack 9.3.1
- Jetpack 9.3.2
- Jetpack 9.3.2-repo-moved
- Jetpack 9.3.3
- Jetpack 9.3.4
- Jetpack 9.3.5
- Jetpack 9.3-beta
- Jetpack 9.4
- Jetpack 9.4.1
- Jetpack 9.4.2
- Jetpack 9.4.3
- Jetpack 9.4.4
- Jetpack 9.4-beta
- Jetpack 9.5
- Jetpack 9.5.1
- Jetpack 9.5.2
- Jetpack 9.5.3
- Jetpack 9.5.4
- Jetpack 9.5.5
- Jetpack 9.5-beta
- Jetpack 9.6
- Jetpack 9.6.1
- Jetpack 9.6.2
- Jetpack 9.6.3
- Jetpack 9.6.4
- Jetpack 9.6-beta
- Jetpack 9.7
- Jetpack 9.7.1
- Jetpack 9.7.2
- Jetpack 9.7.3
- Jetpack 9.7-beta
- Jetpack 9.7-beta2
- Jetpack 9.8
- Jetpack 9.8.1
- Jetpack 9.8.2
- Jetpack 9.8.3
- Jetpack 9.8-beta
- Jetpack 9.9
- Jetpack 9.9.1
- Jetpack 9.9.2
- Jetpack 9.9.3
- Jetpack 9.9-beta
- Jetpack pr-update-to