[20170306] Cross-site scripting (XSS) via media file metadata

WordPress versions 4.7.2 and earlier contain a Cross-site scripting (XSS) vulnerability in the media file metadata which can be exploited by hackers.

This vulnerability affects the following application versions:

• WordPress 3.5
• WordPress 3.5.1
• WordPress 3.5.2
• WordPress 3.6
• WordPress 3.6.1
• WordPress 3.7
• WordPress 3.7.1
• WordPress 3.7.2
• WordPress 3.7.3
• WordPress 3.7.4
• WordPress 3.7.5
• WordPress 3.7.6
• WordPress 3.7.7
• WordPress 3.7.8
• WordPress 3.7.9
• WordPress 3.7.10
• WordPress 3.7.11
• WordPress 3.7.12
• WordPress 3.7.13
• WordPress 3.7.14
• WordPress 3.7.15
• WordPress 3.7.16
• WordPress 3.7.17
• WordPress 3.7.18
• WordPress 3.7.19
• WordPress 3.7.20
• WordPress 3.7.21
• WordPress 3.7.22
• WordPress 3.7.23
• WordPress 3.7.24
• WordPress 3.7.25
• WordPress 3.7.26
• WordPress 3.7.27
• WordPress 3.7.28
• WordPress 3.7.29
• WordPress 3.7.30
• WordPress 3.7.31
• WordPress 3.7.32
• WordPress 3.8
• WordPress 3.8.1
• WordPress 3.8.2
• WordPress 3.8.3
• WordPress 3.8.4
• WordPress 3.8.5
• WordPress 3.8.6
• WordPress 3.8.7
• WordPress 3.8.8
• WordPress 3.8.9
• WordPress 3.8.10
• WordPress 3.8.11
• WordPress 3.8.12
• WordPress 3.8.13
• WordPress 3.8.14
• WordPress 3.8.15
• WordPress 3.8.16
• WordPress 3.8.17
• WordPress 3.8.18
• WordPress 3.8.19
• WordPress 3.8.20
• WordPress 3.8.21
• WordPress 3.8.22
• WordPress 3.8.23
• WordPress 3.8.24
• WordPress 3.8.25
• WordPress 3.8.26
• WordPress 3.8.27
• WordPress 3.8.28
• WordPress 3.8.29
• WordPress 3.8.30
• WordPress 3.8.31
• WordPress 3.8.32
• WordPress 3.9
• WordPress 3.9.1
• WordPress 3.9.2
• WordPress 3.9.3
• WordPress 3.9.4
• WordPress 3.9.5
• WordPress 3.9.6
• WordPress 3.9.7
• WordPress 3.9.8
• WordPress 3.9.9
• WordPress 3.9.10
• WordPress 3.9.11
• WordPress 3.9.12
• WordPress 3.9.13
• WordPress 3.9.14
• WordPress 3.9.15
• WordPress 3.9.16
• WordPress 3.9.17
• WordPress 3.9.18
• WordPress 3.9.19
• WordPress 3.9.20
• WordPress 3.9.21
• WordPress 3.9.22
• WordPress 3.9.23
• WordPress 3.9.24
• WordPress 3.9.25
• WordPress 3.9.26
• WordPress 3.9.27
• WordPress 3.9.28
• WordPress 3.9.29
• WordPress 3.9.30
• WordPress 4.0
• WordPress 4.0.1
• WordPress 4.0.2
• WordPress 4.0.3
• WordPress 4.0.4
• WordPress 4.0.5
• WordPress 4.0.6
• WordPress 4.0.7
• WordPress 4.0.8
• WordPress 4.0.9
• WordPress 4.0.10
• WordPress 4.0.11
• WordPress 4.0.12
• WordPress 4.0.13
• WordPress 4.0.14
• WordPress 4.0.15
• WordPress 4.0.16
• WordPress 4.0.17
• WordPress 4.0.18
• WordPress 4.0.19
• WordPress 4.0.20
• WordPress 4.0.21
• WordPress 4.0.22
• WordPress 4.0.23
• WordPress 4.0.24
• WordPress 4.0.25
• WordPress 4.0.26
• WordPress 4.0.27
• WordPress 4.0.28
• WordPress 4.0.29
• WordPress 4.1
• WordPress 4.1.1
• WordPress 4.1.2
• WordPress 4.1.3
• WordPress 4.1.4
• WordPress 4.1.5
• WordPress 4.1.6
• WordPress 4.1.7
• WordPress 4.1.8
• WordPress 4.1.9
• WordPress 4.1.10
• WordPress 4.1.11
• WordPress 4.1.12
• WordPress 4.1.13
• WordPress 4.1.14
• WordPress 4.1.15
• WordPress 4.1.16
• WordPress 4.1.17
• WordPress 4.1.18
• WordPress 4.1.19
• WordPress 4.1.20
• WordPress 4.1.21
• WordPress 4.1.22
• WordPress 4.1.23
• WordPress 4.1.24
• WordPress 4.1.25
• WordPress 4.1.26
• WordPress 4.1.27
• WordPress 4.1.28
• WordPress 4.1.29
• WordPress 4.2
• WordPress 4.2.1
• WordPress 4.2.2
• WordPress 4.2.3
• WordPress 4.2.4
• WordPress 4.2.5
• WordPress 4.2.6
• WordPress 4.2.7
• WordPress 4.2.8
• WordPress 4.2.9
• WordPress 4.2.10
• WordPress 4.2.11
• WordPress 4.2.12
• WordPress 4.2.13
• WordPress 4.2.14
• WordPress 4.2.15
• WordPress 4.2.16
• WordPress 4.2.17
• WordPress 4.2.18
• WordPress 4.2.19
• WordPress 4.2.20
• WordPress 4.2.21
• WordPress 4.2.22
• WordPress 4.2.23
• WordPress 4.2.24
• WordPress 4.2.25
• WordPress 4.2.26
• WordPress 4.3
• WordPress 4.3.1
• WordPress 4.3.2
• WordPress 4.3.3
• WordPress 4.3.4
• WordPress 4.3.5
• WordPress 4.3.6
• WordPress 4.3.7
• WordPress 4.3.8
• WordPress 4.3.9
• WordPress 4.3.10
• WordPress 4.3.11
• WordPress 4.3.12
• WordPress 4.3.13
• WordPress 4.3.14
• WordPress 4.3.15
• WordPress 4.3.16
• WordPress 4.3.17
• WordPress 4.3.18
• WordPress 4.3.19
• WordPress 4.3.20
• WordPress 4.3.21
• WordPress 4.3.22
• WordPress 4.4
• WordPress 4.4.1
• WordPress 4.4.2
• WordPress 4.4.3
• WordPress 4.4.4
• WordPress 4.4.5
• WordPress 4.4.6
• WordPress 4.4.7
• WordPress 4.5
• WordPress 4.5.1
• WordPress 4.5.2
• WordPress 4.5.3
• WordPress 4.5.4
• WordPress 4.5.5
• WordPress 4.5.6
• WordPress 4.6
• WordPress 4.6.1
• WordPress 4.6.2
• WordPress 4.6.3
• WordPress 4.7
• WordPress 4.7.1
• WordPress 4.7.2