CVE-2017-6818 (wordpress)

In WordPress before 4.7.3 (wp-admin/js/tags-box.js), there is cross-site scripting (XSS) via taxonomy term names.

Source: CVE-2017-6818 (wordpress)