The application password screen is not properly escaped to prevent an XSS.
This vulnerability affects the following application versions:
- WordPress 5.6
- WordPress 5.6.1
- WordPress 5.6.2
- WordPress 5.6.3
- WordPress 5.6.4
- WordPress 5.6.5
- WordPress 5.6.6
- WordPress 5.6.7
- WordPress 5.6.8
- WordPress 5.6.9
- WordPress 5.6.10
- WordPress 5.6.11
- WordPress 5.7
- WordPress 5.7.1
- WordPress 5.7.2
- WordPress 5.7.3
- WordPress 5.7.4
- WordPress 5.7.5
- WordPress 5.7.6
- WordPress 5.7.7
- WordPress 5.7.8
- WordPress 5.7.9
- WordPress 5.8
- WordPress 5.8.1
- WordPress 5.8.2
- WordPress 5.8.3
- WordPress 5.8.4
- WordPress 5.8.5
- WordPress 5.8.6
- WordPress 5.8.7
- WordPress 5.9
- WordPress 5.9.1
- WordPress 5.9.2
- WordPress 5.9.3
- WordPress 5.9.4
- WordPress 5.9.5
- WordPress 5.9.6
- WordPress 5.9.7
- WordPress 6.0
- WordPress 6.0.1
- WordPress 6.0.2
- WordPress 6.0.3
- WordPress 6.0.4
- WordPress 6.0.5
- WordPress 6.1
- WordPress 6.1.1
- WordPress 6.1.2
- WordPress 6.1.3
- WordPress 6.2
- WordPress 6.2.1
- WordPress 6.2.2
- WordPress 6.3
- WordPress 6.3.1