XSS through incomplete comment sanitizing

The WordPress team was made aware of a cross-site scripting vulnerability, which could enable commenters to compromise a site.

This vulnerability affects the following application versions:

• WordPress 3.7.6



• WordPress 3.7.7



• WordPress 3.8.6



• WordPress 3.8.7



• WordPress 3.9.4



• WordPress 3.9.5



• WordPress 4.0.3



• WordPress 4.1.2



• WordPress 4.1.3



• WordPress 4.2