Description
Lack of output escaping for article titles leads to XSS vectors in various locations.
Remediation
References
Related Vulnerabilities
WordPress Plugin Protected Posts Logout Button Cross-Site Request Forgery (1.4.4)
WordPress Plugin Newspack Blocks Arbitrary File Upload (3.0.8)
WordPress Plugin Theme Blvd Widget Areas Multiple Security Bypass Vulnerabilities (1.2.2)
Plone CMS Improper Input Validation Vulnerability (CVE-2013-4195)