Security News > 2016 > September > WordPress Flaw Allows XSS Attack via Image Filenames (SecurityWeek)