Genericons DOM-based XSS vulnerability

Description

"Genericons are vector icons embedded in a webfont designed to be clean and simple keeping with a generic aesthetic."

The Genericons package includes a file called example.html which has been found to be vulnerable to a DOM-based XSS vulnerability. This package is included in various WordPress plugins and themes. For example is included in the TwentyFifteen theme (installed by default) and the very popular JetPack plugin.

Remediation

Remove the example.html file located in the genericons directory.

References

Related Vulnerabilities

Severity

Classification

Tags