< 1.5.3
1.5.3
The xo-security plugin before 1.5.3 for WordPress has XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.