Description The Jetpack plugin before 4.0.3 for WordPress has XSS via a crafted Vimeo link. References https://jetpack.com/2016/05/27/jetpack-4-0-3-critical-security-update/ https://www.wordfence.com/blog/2016/05/jetpack-vulnerability/