Sourced from WordPress.org Documentation.
Summary
Security updates
WordPress 6.5.1 includes 1 security fix:
- A cross-site scripting (XSS) vulnerability affecting the Avatar block type; reported by John Blackbourn of the WordPress security team. Many thanks to Mat Rollings for assisting with the research.
The earliest release requiring patching was WordPress 6.1.
Thank you to everyone who contributed to this version. For more information, browse the full list of changes on Trac.