CVE-2017-14726

Before version 4.8.2, WordPress was vulnerable to a cross-site scripting attack via shortcodes in the TinyMCE visual editor.

Date published : 2017-09-23

http://www.securityfocus.com/bid/100912

https://www.debian.org/security/2017/dsa-3997