May 27, 2016 By Marc-Alexandre Montpas https://blog.sucuri.net/2016/05/security-advisory-stored-xss-jetpack-2.html Additional info in this thread