Automattic: Stored XSS in wordpress.com

Summary: Stored XSS as a comment or as a post body or title at https://wordpress.com/read/feeds/blogid/posts/postid https://yoursubdomain.wordpress.com using the payload: Click Here=/iframe Steps To Reproduce: - As a comment 1. Log in to wordpress.com 2. Choose a post from the feeds 3. Add a...