The WordPress team was made aware of a cross-site scripting vulnerability, which could enable commenters to compromise a site.
This vulnerability affects the following application versions:
- WordPress 3.7.6
- WordPress 3.7.7
- WordPress 3.8.6
- WordPress 3.8.7
- WordPress 3.9.4
- WordPress 3.9.5
- WordPress 4.0.3
- WordPress 4.1.2
- WordPress 4.1.3
- WordPress 4.2