5 ms·

https://wordpress.org/news/2015/05/wordpress-4-2-2/ https://wordpress.org/news/2015/05/wordpress-4-2-2/ This is a critical security release. The cross-site scr

by spocked 11y ago

https://wordpress.org/news/2015/05/wordpress-4-2-2/ https://wordpress.org/news/2015/05/wordpress-4-2-2/ This is a critical security release. The cross-site scripting vulnerability lets a commenter compromise your website.

ghubbard 11y ago
The exploit is described and demonstrated in a video on the site of the discoverer: http://klikki.fi/adv/wordpress2.html http://klikki.fi/adv/wordpress2.html