The Jetpack plugin before 4.0.4 for WordPress has XSS via the Likes module.

Published Jan 12, 2018 · Updated Sep 17, 2024 · Assigned by mitre