[20170306] Cross-site scripting via video URL in YouTube embeds

The use of YouTube video URLs allows cross-site scripting.

This vulnerability affects the following application versions:

• WordPress 4.0
• WordPress 4.0.1
• WordPress 4.0.2
• WordPress 4.0.3
• WordPress 4.0.4
• WordPress 4.0.5
• WordPress 4.0.6
• WordPress 4.0.7
• WordPress 4.0.8
• WordPress 4.0.9
• WordPress 4.0.10
• WordPress 4.0.11
• WordPress 4.0.12
• WordPress 4.0.13
• WordPress 4.0.14
• WordPress 4.0.15
• WordPress 4.1
• WordPress 4.1.1
• WordPress 4.1.2
• WordPress 4.1.3
• WordPress 4.1.4
• WordPress 4.1.5
• WordPress 4.1.6
• WordPress 4.1.7
• WordPress 4.1.8
• WordPress 4.1.9
• WordPress 4.1.10
• WordPress 4.1.11
• WordPress 4.1.12
• WordPress 4.1.13
• WordPress 4.1.14
• WordPress 4.1.15
• WordPress 4.2
• WordPress 4.2.1
• WordPress 4.2.2
• WordPress 4.2.3
• WordPress 4.2.4
• WordPress 4.2.5
• WordPress 4.2.6
• WordPress 4.2.7
• WordPress 4.2.8
• WordPress 4.2.9
• WordPress 4.2.10
• WordPress 4.2.11
• WordPress 4.2.12
• WordPress 4.3
• WordPress 4.3.1
• WordPress 4.3.2
• WordPress 4.3.3
• WordPress 4.3.4
• WordPress 4.3.5
• WordPress 4.3.6
• WordPress 4.3.7
• WordPress 4.3.8
• WordPress 4.4
• WordPress 4.4.1
• WordPress 4.4.2
• WordPress 4.4.3
• WordPress 4.4.4
• WordPress 4.4.5
• WordPress 4.4.6
• WordPress 4.4.7
• WordPress 4.5
• WordPress 4.5.1
• WordPress 4.5.2
• WordPress 4.5.3
• WordPress 4.5.4
• WordPress 4.5.5
• WordPress 4.5.6
• WordPress 4.6
• WordPress 4.6.1
• WordPress 4.6.2
• WordPress 4.6.3
• WordPress 4.7
• WordPress 4.7.1
• WordPress 4.7.2