PT-2015-7055

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.2.4 Description A cross-site scripting XSS issue exists in the form function in the WP Nav Menu Widget class. This allows remote attackers to inject arbitrary web script or HTML via a widget title. Recommendations...