Stored Cross-Site Scripting in WordPress wpautop() Blockquote Handling

WordPress core's wpautop() rewrote a -wrapped using an attribute pattern that stopped at the first > character, so a quoted attribute value containing > was split and part of the attacker-supplied string was re-emitted unescaped into the rewritten tag. Because wpautop() is applied to comment content, an unauthenticated visitor can store... Weiterlesen