< 1.9.2
1.9.2
The content-audit plugin before 1.9.2 for WordPress has XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.