WordPress before 5.2.3 allows XSS in post previews by authenticated users.
{ "ubuntu_priority": "medium" }