JetBlog vulnerabilities

The JetBlog plugin for WordPress (up to version 2.4.10) contains a Reflected XSS vulnerability due to improper neutralization of input during web page generation. An unauthenticated attacker can inject malicious JavaScript that executes in the victim's browser.

The JetBlog plugin in versions up to and including 2.4.10 is vulnerable to Cross Site Scripting (XSS). A user with Contributor privileges can inject a malicious script.

In JetBlog versions up to 2.4.8, there is a vulnerability allowing unauthorized access to sensitive data.

The JetBlog plugin by Crocoblock is vulnerable to missing authorization, allowing exploitation of incorrectly configured access control security levels. This issue affects JetBlog versions from n/a through 2.4.7.

Reflected XSS vulnerability in JetBlog up to version 2.4.4. An attacker can send a crafted link that executes a script in the victim's browser.

Stored XSS vulnerability in JetBlog up to version 2.4.4.1. An attacker can store a malicious script that executes when the page is viewed.