{"id":3177,"date":"2026-01-22T14:01:43","date_gmt":"2026-01-22T14:01:43","guid":{"rendered":"https:\/\/www.ucartz.com\/updates\/jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity\/"},"modified":"2026-01-22T14:01:45","modified_gmt":"2026-01-22T14:01:45","slug":"jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity","status":"publish","type":"post","link":"https:\/\/www.ucartz.com\/updates\/jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity\/","title":{"rendered":"Jetpack Stored Cross-Site Scripting (XSS) Vulnerability (CVE-2024-4392): Medium Severity"},"content":{"rendered":"<h3>Unpacking the Jetpack Stored Cross-Site Scripting Vulnerability (CVE-2024-4392)<\/h3>\n<p>The popular WordPress plugin, Jetpack \u2013 WP Security, Backup, Speed, &#038; Growth, has been found to have a security flaw. This flaw is known as a Stored Cross-Site Scripting (XSS) vulnerability. It specifically affects how the plugin handles video content through its &#8216;wpvideo&#8217; shortcode.<\/p>\n<p>In simple terms, this means that an attacker, if they have certain access to your WordPress site (like a contributor or higher role), could sneak malicious code into your website&#8217;s pages or posts. This code then lies in wait. When someone else visits that page, their web browser runs the hidden malicious code. This could lead to various issues, such as stealing sensitive information, redirecting users to harmful websites, or defacing your site.<\/p>\n<p>The core of the problem lies in the plugin&#8217;s failure to properly clean up or &#8220;sanitize&#8221; the information that users enter into certain attributes of the &#8216;wpvideo&#8217; shortcode. It also doesn&#8217;t properly &#8220;escape&#8221; this information when it&#8217;s displayed, leaving an opening for attackers to inject their scripts.<\/p>\n<h2>CVE Details<\/h2>\n<ul>\n<li><strong>Product Name:<\/strong> Jetpack \u2013 WP Security, Backup, Speed, &#038; Growth plugin for WordPress<\/li>\n<li><strong>Published Date:<\/strong> May 14, 2024<\/li>\n<li><strong>Severity:<\/strong> Medium (CVSS Score: 6.4)<\/li>\n<li><strong>Status:<\/strong> Analyzed<\/li>\n<\/ul>\n<h2>Affected Products<\/h2>\n<p>This vulnerability impacts the Jetpack \u2013 WP Security, Backup, Speed, &#038; Growth plugin. Specifically, all versions of the plugin up to, and including, 13.3.1 are vulnerable. If you are running Jetpack version 13.3.1 or an earlier release, your WordPress site could be at risk.<\/p>\n<h2>Current Status<\/h2>\n<p>The vulnerability, identified as CVE-2024-4392, has been officially analyzed and confirmed. This means its details are publicly available, and security researchers and developers are aware of the issue.<\/p>\n<h2>Severity Level<\/h2>\n<p>The vulnerability has been assigned a <strong>Medium<\/strong> severity level with a CVSS score of 6.4. While not the highest severity, a Medium rating indicates that this issue should not be ignored. It requires authenticated access (contributor level or higher) to exploit, which reduces its immediate threat level compared to vulnerabilities exploitable by unauthenticated users. However, once exploited, it can significantly impact user experience and site security.<\/p>\n<h2>Possible Solutions<\/h2>\n<p>The most crucial step to protect your WordPress site from CVE-2024-4392 is to <strong>update your Jetpack plugin immediately<\/strong>. While a specific patched version isn&#8217;t explicitly listed in the initial data, the mention of &#8220;all versions up to, and including, 13.3.1&#8221; strongly implies that a fix has been implemented in versions <em>later<\/em> than 13.3.1. Always ensure your plugins, themes, and WordPress core are kept up-to-date.<\/p>\n<p>Beyond updating, consider these general best practices to mitigate XSS risks:<\/p>\n<ul>\n<li><strong>Principle of Least Privilege:<\/strong> Limit user roles to the absolute minimum access required. For instance, restrict who can post or edit content on your site, especially roles that can use shortcodes or unfiltered HTML.<\/li>\n<li><strong>Web Application Firewall (WAF):<\/strong> Implement a WAF to help detect and block malicious requests, including attempts to inject XSS payloads.<\/li>\n<li><strong>Regular Security Audits:<\/strong> Periodically scan your website for vulnerabilities and unusual activity.<\/li>\n<li><strong>Sanitize and Escape All User Input:<\/strong> Ensure that all user-supplied data, especially in forms, comments, and shortcode attributes, is properly sanitized upon input and escaped upon output. For more on this, you might find our articles on <a href=''\/blog\/understanding-cross-site-scripting-xss''>Understanding Cross-Site Scripting (XSS)<\/a> and <a href=''\/blog\/wordpress-security-best-practices''>WordPress Security Best Practices<\/a> helpful.<\/li>\n<\/ul>\n<h2>References<\/h2>\n<p>plugins.trac.wordpress.org\/browser\/jetpack\/tags\/13.3.1\/modules\/videopress\/class.videopress-player.php#L335<br \/>\nwww.wordfence.com\/threat-intel\/vulnerabilities\/id\/11dceac7-7ff8-4384-9046-919c38947c32?source=cve<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Unpacking the Jetpack Stored Cross-Site Scripting Vulnerability (CVE-2024-4392) The popular WordPress plugin, Jetpack \u2013 WP Security, Backup, Speed, &#038; Growth, has been found to have a security flaw.<\/p>\n","protected":false},"author":17,"featured_media":2545,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[942,943,905,695,719,759],"class_list":["post-3177","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-jetpack","tag-jetpack-plugin","tag-stored-xss","tag-web-security","tag-wordpress-security","tag-xss-vulnerability"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Jetpack Stored Cross-Site Scripting (XSS) - Ucartz | Ucartz<\/title>\n<meta name=\"description\" content=\"Unpacking the Jetpack Stored Cross-Site Scripting Vulnerability (CVE-2024-4392) The popular WordPress plugin, Jetpack \u2013 WP Security, Backup, Speed, &amp;\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.ucartz.com\/updates\/jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Jetpack Stored Cross-Site Scripting (XSS) Vulnerability - Ucartz Updates\" \/>\n<meta property=\"og:description\" content=\"Unpacking the Jetpack Stored Cross-Site Scripting Vulnerability (CVE-2024-4392) The popular WordPress plugin, Jetpack \u2013 WP Security, Backup, Speed, &amp;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.ucartz.com\/updates\/jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity\/\" \/>\n<meta property=\"og:site_name\" content=\"Ucartz Updates\" \/>\n<meta property=\"article:published_time\" content=\"2026-01-22T14:01:43+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-01-22T14:01:45+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.ucartz.com\/updates\/wp-content\/uploads\/2025\/12\/Wordpress-Banner.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"576\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Alex Joseph\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Alex Joseph\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@context\":\"https:\\\/\\\/schema.org\",\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity\\\/\"},\"author\":{\"name\":\"Alex Joseph\",\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/#\\\/schema\\\/person\\\/1ba9bfab02a76dee216c9f55bb634e56\"},\"headline\":\"Jetpack Stored Cross-Site Scripting (XSS) Vulnerability (CVE-2024-4392): Medium Severity\",\"datePublished\":\"2026-01-22T14:01:43+00:00\",\"dateModified\":\"2026-01-22T14:01:45+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity\\\/\"},\"wordCount\":567,\"publisher\":{\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/Wordpress-Banner.webp\",\"keywords\":[\"Jetpack\",\"Jetpack Plugin\",\"Stored XSS\",\"Web Security\",\"WordPress Security\",\"XSS Vulnerability\"],\"articleSection\":[\"Security\"],\"inLanguage\":\"en-US\"},{\"@context\":\"https:\\\/\\\/schema.org\",\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity\\\/\",\"url\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity\\\/\",\"name\":\"| Ucartz Updates | Ucartz\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/Wordpress-Banner.webp\",\"datePublished\":\"2026-01-22T14:01:43+00:00\",\"dateModified\":\"2026-01-22T14:01:45+00:00\",\"description\":\"Unpacking the Jetpack Stored Cross-Site Scripting Vulnerability (CVE-2024-4392) The popular WordPress plugin, Jetpack \u2013 WP Security, Backup, Speed, &\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity\\\/\"]}]},{\"@context\":\"https:\\\/\\\/schema.org\",\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/Wordpress-Banner.webp\",\"contentUrl\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/Wordpress-Banner.webp\",\"width\":1024,\"height\":576},{\"@context\":\"https:\\\/\\\/schema.org\",\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Jetpack Stored Cross-Site Scripting (XSS) Vulnerability (CVE-2024-4392): Medium Severity\"}]},{\"@context\":\"https:\\\/\\\/schema.org\",\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/#website\",\"url\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/\",\"name\":\"Ucartz Updates\",\"description\":\"Security advisories and release notes for hosting, server and automation software, from the Ucartz team.\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/#organization\"},\"alternateName\":\"Ucartz\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@context\":\"https:\\\/\\\/schema.org\",\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/#organization\",\"name\":\"Ucartz Online Private Limited\",\"url\":\"https:\\\/\\\/www.ucartz.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.ucartz.com\\\/assets\\\/images\\\/brand\\\/logo\\\/ucartz-logo-888x240.png\",\"contentUrl\":\"https:\\\/\\\/www.ucartz.com\\\/assets\\\/images\\\/brand\\\/logo\\\/ucartz-logo-888x240.png\",\"width\":888,\"height\":240,\"caption\":\"Ucartz\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"alternateName\":\"Ucartz\",\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/UcartzOnline\",\"https:\\\/\\\/twitter.com\\\/ucartz\",\"https:\\\/\\\/www.instagram.com\\\/ucartz_com\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/ucartzonline\",\"https:\\\/\\\/github.com\\\/ucartz\",\"https:\\\/\\\/n8n.io\\\/creators\\\/ucartz\\\/\",\"https:\\\/\\\/marketplace.whmcs.com\\\/group\\\/Ucartz\"]},{\"@context\":\"https:\\\/\\\/schema.org\",\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/#\\\/schema\\\/person\\\/1ba9bfab02a76dee216c9f55bb634e56\",\"name\":\"Alex Joseph\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/wp-content\\\/themes\\\/ucartz-blog\\\/assets\\\/images\\\/authors\\\/17.webp\",\"url\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/wp-content\\\/themes\\\/ucartz-blog\\\/assets\\\/images\\\/authors\\\/17.webp\",\"contentUrl\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/wp-content\\\/themes\\\/ucartz-blog\\\/assets\\\/images\\\/authors\\\/17.webp\",\"caption\":\"Alex Joseph\"},\"description\":\"Alex Joseph is a Senior Support Staff professional with deep experience in server management, web hosting technologies, and cybersecurity operations. He works daily with Linux servers, cloud platforms, performance tuning, and security hardening, giving him strong real-world technical knowledge. Along with his support role, he write about security best practices, hosting infrastructure, and software management.\",\"url\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/author\\\/alexjoseph\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Jetpack Stored Cross-Site Scripting (XSS) - Ucartz | Ucartz","description":"Unpacking the Jetpack Stored Cross-Site Scripting Vulnerability (CVE-2024-4392) The popular WordPress plugin, Jetpack \u2013 WP Security, Backup, Speed, &","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.ucartz.com\/updates\/jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity\/","og_locale":"en_US","og_type":"article","og_title":"Jetpack Stored Cross-Site Scripting (XSS) Vulnerability - Ucartz Updates","og_description":"Unpacking the Jetpack Stored Cross-Site Scripting Vulnerability (CVE-2024-4392) The popular WordPress plugin, Jetpack \u2013 WP Security, Backup, Speed, &","og_url":"https:\/\/www.ucartz.com\/updates\/jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity\/","og_site_name":"Ucartz Updates","article_published_time":"2026-01-22T14:01:43+00:00","article_modified_time":"2026-01-22T14:01:45+00:00","og_image":[{"width":1024,"height":576,"url":"https:\/\/www.ucartz.com\/updates\/wp-content\/uploads\/2025\/12\/Wordpress-Banner.webp","type":"image\/webp"}],"author":"Alex Joseph","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Alex Joseph","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@context":"https:\/\/schema.org","@type":"Article","@id":"https:\/\/www.ucartz.com\/updates\/jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity\/#article","isPartOf":{"@id":"https:\/\/www.ucartz.com\/updates\/jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity\/"},"author":{"name":"Alex Joseph","@id":"https:\/\/www.ucartz.com\/updates\/#\/schema\/person\/1ba9bfab02a76dee216c9f55bb634e56"},"headline":"Jetpack Stored Cross-Site Scripting (XSS) Vulnerability (CVE-2024-4392): Medium Severity","datePublished":"2026-01-22T14:01:43+00:00","dateModified":"2026-01-22T14:01:45+00:00","mainEntityOfPage":{"@id":"https:\/\/www.ucartz.com\/updates\/jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity\/"},"wordCount":567,"publisher":{"@id":"https:\/\/www.ucartz.com\/#organization"},"image":{"@id":"https:\/\/www.ucartz.com\/updates\/jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ucartz.com\/updates\/wp-content\/uploads\/2025\/12\/Wordpress-Banner.webp","keywords":["Jetpack","Jetpack Plugin","Stored XSS","Web Security","WordPress Security","XSS Vulnerability"],"articleSection":["Security"],"inLanguage":"en-US"},{"@context":"https:\/\/schema.org","@type":"WebPage","@id":"https:\/\/www.ucartz.com\/updates\/jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity\/","url":"https:\/\/www.ucartz.com\/updates\/jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity\/","name":"| Ucartz Updates | Ucartz","isPartOf":{"@id":"https:\/\/www.ucartz.com\/updates\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.ucartz.com\/updates\/jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity\/#primaryimage"},"image":{"@id":"https:\/\/www.ucartz.com\/updates\/jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ucartz.com\/updates\/wp-content\/uploads\/2025\/12\/Wordpress-Banner.webp","datePublished":"2026-01-22T14:01:43+00:00","dateModified":"2026-01-22T14:01:45+00:00","description":"Unpacking the Jetpack Stored Cross-Site Scripting Vulnerability (CVE-2024-4392) The popular WordPress plugin, Jetpack \u2013 WP Security, Backup, Speed, &","breadcrumb":{"@id":"https:\/\/www.ucartz.com\/updates\/jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.ucartz.com\/updates\/jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity\/"]}]},{"@context":"https:\/\/schema.org","@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ucartz.com\/updates\/jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity\/#primaryimage","url":"https:\/\/www.ucartz.com\/updates\/wp-content\/uploads\/2025\/12\/Wordpress-Banner.webp","contentUrl":"https:\/\/www.ucartz.com\/updates\/wp-content\/uploads\/2025\/12\/Wordpress-Banner.webp","width":1024,"height":576},{"@context":"https:\/\/schema.org","@type":"BreadcrumbList","@id":"https:\/\/www.ucartz.com\/updates\/jetpack-stored-cross-site-scripting-xss-vulnerability-cve-2024-4392-medium-severity\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.ucartz.com\/updates\/"},{"@type":"ListItem","position":2,"name":"Jetpack Stored Cross-Site Scripting (XSS) Vulnerability (CVE-2024-4392): Medium Severity"}]},{"@context":"https:\/\/schema.org","@type":"WebSite","@id":"https:\/\/www.ucartz.com\/updates\/#website","url":"https:\/\/www.ucartz.com\/updates\/","name":"Ucartz Updates","description":"Security advisories and release notes for hosting, server and automation software, from the Ucartz team.","publisher":{"@id":"https:\/\/www.ucartz.com\/#organization"},"alternateName":"Ucartz","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.ucartz.com\/updates\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@context":"https:\/\/schema.org","@type":"Organization","@id":"https:\/\/www.ucartz.com\/#organization","name":"Ucartz Online Private Limited","url":"https:\/\/www.ucartz.com\/","logo":{"@type":"ImageObject","@id":"https:\/\/www.ucartz.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.ucartz.com\/assets\/images\/brand\/logo\/ucartz-logo-888x240.png","contentUrl":"https:\/\/www.ucartz.com\/assets\/images\/brand\/logo\/ucartz-logo-888x240.png","width":888,"height":240,"caption":"Ucartz"},"image":{"@id":"https:\/\/www.ucartz.com\/#\/schema\/logo\/image\/"},"alternateName":"Ucartz","sameAs":["https:\/\/www.facebook.com\/UcartzOnline","https:\/\/twitter.com\/ucartz","https:\/\/www.instagram.com\/ucartz_com","https:\/\/www.linkedin.com\/company\/ucartzonline","https:\/\/github.com\/ucartz","https:\/\/n8n.io\/creators\/ucartz\/","https:\/\/marketplace.whmcs.com\/group\/Ucartz"]},{"@context":"https:\/\/schema.org","@type":"Person","@id":"https:\/\/www.ucartz.com\/updates\/#\/schema\/person\/1ba9bfab02a76dee216c9f55bb634e56","name":"Alex Joseph","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ucartz.com\/updates\/wp-content\/themes\/ucartz-blog\/assets\/images\/authors\/17.webp","url":"https:\/\/www.ucartz.com\/updates\/wp-content\/themes\/ucartz-blog\/assets\/images\/authors\/17.webp","contentUrl":"https:\/\/www.ucartz.com\/updates\/wp-content\/themes\/ucartz-blog\/assets\/images\/authors\/17.webp","caption":"Alex Joseph"},"description":"Alex Joseph is a Senior Support Staff professional with deep experience in server management, web hosting technologies, and cybersecurity operations. He works daily with Linux servers, cloud platforms, performance tuning, and security hardening, giving him strong real-world technical knowledge. Along with his support role, he write about security best practices, hosting infrastructure, and software management.","url":"https:\/\/www.ucartz.com\/updates\/author\/alexjoseph\/"}]}},"_links":{"self":[{"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/posts\/3177","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/comments?post=3177"}],"version-history":[{"count":1,"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/posts\/3177\/revisions"}],"predecessor-version":[{"id":3178,"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/posts\/3177\/revisions\/3178"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/media\/2545"}],"wp:attachment":[{"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/media?parent=3177"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/categories?post=3177"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/tags?post=3177"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}