Description
In WordPress before 4.7.5, a cross-site scripting (XSS) vulnerability related to the Customizer exists, involving an invalid customization session.
Remediation
References
Related Vulnerabilities
Microsoft SQL Server Other Vulnerability (CVE-2000-1086)
Squid Improper Encoding or Escaping of Output Vulnerability (CVE-2021-31806)
WebLogic CVE-2016-0573 Vulnerability (CVE-2016-0573)
WordPress Plugin iLive-Intelligent WordPress Live Chat Support Cross-Site Scripting (1.0.4)
Moodle Improper Input Validation Vulnerability (CVE-2006-4936)