WordPress before 5.5.2 allows stored XSS via post slugs.
{ "cpes": [ "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*" ], "severity": "Medium" }