PT-2016-6702

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.5.3 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is due to a vulnerability in the wp get attachment link function. The estimated numbe...