WordPress.Stored.XSS

Description

This indicates an attack attempt against a Cross-Site Scripting vulnerability in WordPress.
The vulnerability is caused by an error when the vulnerable software handles a overlong comment. It allows a remote attacker to execute arbitrary javascript via a crafted http request.

Affected Products

WordPress 4.2, 4.1.2, 4.1.1, 3.9.3

Impact

System Compromise: Remote attackers can execute arbitrary script code within the context of the target user's browser.

Recommended Actions

Currently we are unaware of any vendor supplied patch for this issue.

References