Output validation vulnerability in Jetpack – WP Security, Backup, Speed, & Growth 4.2

The Jetpack plugin is a tool used to help protect, back up, speed up, and grow WordPress websites. However, a security issue has been discovered in versions up to 4.2 that makes it vulnerable to CSV Injection. This means that unauthenticated attackers can use contact forms to insert malicious code into data that is exported into CSV files. If a user downloads these files and opens them on a system with a vulnerable configuration, this malicious code can be executed.