CVE ID : CVE-2024-10858

Published : Dec. 25, 2024, 6:15 a.m. | 1 hour, 1 minute ago

Description : The Jetpack WordPress plugin before 14.1 does not properly checks the postmessage origin in its 13.x versions, allowing it to be bypassed and leading to DOM-XSS. The issue only affects websites hosted on WordPress.com.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…