CVE-2017-14720

Before version 4.8.2, WordPress allowed a Cross-Site scripting attack in the template list view via a crafted template name.

Date published : 2017-09-23

http://www.securityfocus.com/bid/100912

https://www.debian.org/security/2017/dsa-3997