Twenty Fifteen Theme <= 1.1 & WordPress Core < 4.2.2 - Cross-Site Scripting via example.html
mediumCross-site scripting (XSS) vulnerability in example.html in Genericons before 3.3.1, as used in WordPress before 4.2.2, allows remote attackers to inject arbitrary web script or HTML via a fragment identifier.
- CVSS:
- 6.4
- Affected:
- up to 1.1
- Fixed in:
- 1.2
- Disclosed:
- Apr 8, 2015