< 1.6.5
1.6.5
The tubepress plugin before 1.6.5 for WordPress has XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.