Description
In WordPress before 4.7.5, a cross-site scripting (XSS) vulnerability related to the Customizer exists, involving an invalid customization session.
Remediation
References
Related Vulnerabilities
WordPress Plugin WooCommerce Catalog Enquiry Arbitrary File Upload (3.0.0)
WordPress Plugin StatPress Cross-Site Scripting (1.2.9.1)
WordPress Plugin Jetpack-WP Security, Backup, Speed, & Growth Cross-Site Scripting (3.5.2)
OpenSSL Improper Input Validation Vulnerability (CVE-2008-5077)
WordPress Plugin Easy Forms for Mailchimp PHP Code Injection (6.5.2)