< 5.5.2
5.5.2
WordPress before 5.5.2 allows XSS associated with global variables.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.