WordPress Twenty Fifteen 4.2.1 Cross Site Scripting

WordPress Twenty Fifteen theme version 4.2.1 suffers from a cross site scripting vulnerability.