Input validation vulnerability in Jetpack – WP Security, Backup, Speed, & Growth 4.2

The Jetpack plugin for WordPress can be vulnerable to a type of attack called Reflected Cross-Site Scripting in versions up to 4.1.x. This type of attack happens when unauthenticated attackers can inject malicious web scripts into pages that execute when a user clicks on a link or performs a certain action. Unfortunately, the plugin does not have proper input sanitation and output escaping, so it is possible for the attackers to do this.