PT-2017-6149

Name of the Vulnerable Software and Affected Versions: WordPress post highlights plugin versions prior to 2.6.1 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the txt parameter in a headline action to "ajax/ph save.php" API endpoin...