JetBlog vulnerabilities

In JetBlog versions up to 2.4.8, there is a vulnerability allowing unauthorized access to sensitive data.

The JetBlog plugin in versions up to and including 2.4.10 is vulnerable to Cross Site Scripting (XSS). A user with Contributor privileges can inject a malicious script.

The JetBlog plugin by Crocoblock is vulnerable to missing authorization, allowing exploitation of incorrectly configured access control security levels. This issue affects JetBlog versions from n/a through 2.4.7.