< 3.4.1
3.4.1
The total-security plugin before 3.4.1 for WordPress has XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.