WordPress Core < 7.1.1 - Unauthenticated Stored XSS via Comment (Comment2Shell)

WordPress core before 7.1.1 is vulnerable to unauthenticated stored XSS via crafted blockquote comments. wpksespost accepts a with a literal newline in the cite attribute, wpautop's non-quote-aware regex injects a inside the cite value, and wptexturize leaves the attribute open so onfocus/autofoc...