WordPress 4.4 and prior versions contain a cross-site scripting vulnerability.

Connectikpeople recalls that WordPress 4.4 and prior versions contain a cross-site scripting vulnerability. Exploitation of this vulnerability could allow a remote attacker to take control of an affected website.

Therefore, users and administrators are encouraged to review the WordPress Security and Maintenance Release and upgrade to WordPress 4.4.1.