WordPress: Large-site Quick Edit reparses a Contributor display name into active HTML

A stored cross-site scripting vulnerability was discovered in the Posts list Quick Edit feature on WordPress sites with more than 10,000 users. When an administrator opened a crafted URL and clicked Quick Edit on a pending post authored by a contributor, the contributor's entity-encoded display...

A small note to get it+jsp on vulnerability analysis-vulnerability warning-the black bar safety net

Directory: 0×0 0:Baidu is black thinking 0×0 1:simply scored it 0×0 2:Google+related information 0×0 3:for jsp vulnerability analysis 0×0 4:for oracle release pants science 0×0 0:Baidu is black thinking Look under the vulnerability information: -----------------------------------------...