Control: tag -1 pending Hello,
Bug #1152426 in wordpress reported by you has been fixed in the Git repository and is awaiting an upload. You can see the commit message below and you can check the diff of the fix at: https://salsa.debian.org/debian/wordpress/-/commit/93bb0c51d34b9ae588edd2e4e04c2e5ad5a59c11 ------------------------------------------------------------------------ New upstream security release 7.1.4 * New upstream security release Closes: #1152426 Stored XSS with specially crafted block markup. Privacy Data Removal Requests can be created in a way that leads to stored XSS. Multiple stored XSS issues in the Interactivity API. Stored DoS issue in the Interactivity API. Stored XSS in Customizer selective refresh. Stored XSS in the Categories block. Specially crafted User Logins can lead to a stored XSS. Unpublished customizer changesets can be discovered by unauthenticated users. Stored XSS in Playlist and image blocks. Stored XSS in core/comments-pagination-next and core/comments-pagination-previous blocks. Notes can be read by privileged users that lack access to edit the post the note is attached to. * Possibly not applicable but updated anyway: An update to the bundled root certificates due to the eMudhra revocation. A weakness in the WordPress upgrade process which can lead to remote code execution during the upgrade window. ------------------------------------------------------------------------ (this message was generated automatically) -- Greetings https://bugs.debian.org/1152426
