WordPress 4.2.2 Security and Maintenance Release

wordpress.org

2 pointsstrommen1 comment

> The Genericons icon font package, which is used in a number of popular themes and plugins, contained an HTML file vulnerable to a cross-site scripting attack.

How can an HTML file be vulnerable to XSS?

Reply on news.ycombinator.com