Description
"Genericons are vector icons embedded in a webfont designed to be clean and simple keeping with a generic aesthetic."
The Genericons package includes a file called example.html which has been found to be vulnerable to a DOM-based XSS vulnerability. This package is included in various WordPress plugins and themes. For example is included in the TwentyFifteen theme (installed by default) and the very popular JetPack plugin.
Remediation
Remove the example.html file located in the genericons directory.
References
WordPress 4.2.2 Security and Maintenance Release