Cross-site scripting (XSS) is a security vulnerability that can be found in WordPress before version 3.9.2 when it is used in a “”Multisite”” configuration. This vulnerability could allow a remote authenticated administrator to inject malicious code (like web scripts or HTML) into a website