WordPress Content Injection Flaw Makes XSS Bug More Severe
Sucuri has shared details about one of the cross-site scripting (XSS) vulnerabilities patched last week in WordPress. The flaw can be highly useful to attackers if combined with a content injection bug that has been exploited in the wild.
Read more: WordPress Content Injection Flaw Makes XSS Bug More Severe
Story added 15. March 2017, content source with full text you can find at link above.