CVE-2016-10705 in Jetpack Plugin

Summary

The Jetpack plugin before 4.0.4 for WordPress has XSS via the Likes module.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 01/12/2018
• Disclosure: 01/12/2018
• Moderation: VulDB entry created
• Entries: VDB-111798 (1)
• CPE: ready
• CWE: CWE-79 (Confirmed)
• CVSS: 5.2
• EPSS: 0.00207
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-10705
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-10705
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-10705/