Input validation vulnerability in WordPress 5.6.11

WordPress Core, the software used to create and manage websites, is vulnerable to a type of attack called Reflected Cross-Site Scripting. This vulnerability exists in versions 5.6 to 6.3.1 and is caused by an issue with the way parameters are handled when requesting application passwords. Attackers could take advantage of this vulnerability by injecting malicious web scripts into pages and convincing a user to click on a link or accept or reject an application password. If successful, these scripts would then be executed.