File uploads allow for cross-site scripting in Wordpress | Heykuki News