WordPress Cross-Site Scripting Vulnerability (CNVD-2015-05150)

WordPress is a blogging platform developed using the PHP language. A cross-site scripting vulnerability exists in WordPress versions prior to 4.1.2, which can be exploited by remote attackers to inject arbitrary web script or HTML with the help of four-byte UTF-8 characters or invalid characters...