$Genericons DOM-based XSS vulnerability


"Genericons are vector icons embedded in a webfont designed to be clean and simple keeping with a generic aesthetic."

The Genericons package includes a file called example.html which has been found to be vulnerable to a DOM-based XSS vulnerability. This package is included in various WordPress plugins and themes. For example is included in the TwentyFifteen theme (installed by default) and the very popular JetPack plugin.


Remove the example.html file located in the genericons directory.