Cross-site Scripting (XSS)

wordpress is vulnerable to cross-site scripting XSS. The attack is due to lack of sanitization of URL in wpksesbadprotocolonce in wp-includes/kses.php...