< 5.2.3
5.2.3
WordPress before 5.2.3 allows XSS in shortcode previews.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.