How do I know that my Wordpress site does not contain xss vulnerabilities?

Question

XSS

I am noob.
Received a warning from the hosting company that the files are:
/home/moysite/public_html/wp-includes/formatting.php
/home/moysite/public_html/wp-includes/comment.php
/home/moysite/public_html/wp-admin /includes/ajax-actions.php
...XSS vulnerabilities found.
The current version of WP is 4.8.8
The panel proposes to upgrade WP to version 5.1.1
Will the upgrade be sufficient? Or do you need to do something special to protect yourself?

Answer 1

Update DEFINITELY !
Most of the problems with the WP are due to outdated software and leaky plugins.
You don't have to worry about the core itself. If a vulnerability becomes known, the developers will fix it as quickly as possible. You only need to update on time.

Answer 2

https://blog.ripstech.com/2019/wordpress-csrf-to-rce/