WordPress: XSS in the search bar of mercantile.wordpress.org

Hi wordpress! Glad to see you here at H1. I found a XSS issue in the https://mercantile.wordpress.org/s= This works with the angular js payloads. I did inject a angular js code its because I found the ng-bindable in the source. STEPS TO REPRODUCE 1. Go to https://mercantile.wordpress.org 2. Click...