Shortcodes were not properly escaped against HTML tags and this could result in an XSS attack.
This vulnerability affects the following application versions:
- Jetpack 2.9.1
- Jetpack 2.9.1b1
- Jetpack 2.9.2
- Jetpack 2.9.3
- Jetpack 2.9.4
- Jetpack 2.9.5
- Jetpack 2.9.6