Unrated
The Jetpack plugin before 4.0.4 for WordPress has XSS via the Likes module.
CVE-2016-10705
First seen on SecPulse
References
- advisory jetpack.com
- advisory wpvulndb.com