Lucene search

K
patchstackSiteWatchPATCHSTACK:7E964BA9FF7A136E4306531A88B177F8
HistorySep 24, 2011 - 12:00 a.m.

WordPress Web Minimalist Theme 1.1 - Cross Site Scripting

2011-09-2400:00:00
SiteWatch
patchstack.com
42

EPSS

0.002

Percentile

54.4%

WordPress Web Minimalist theme’s “index.php” parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-based authentication credentials. Other attacks are also possible.

Solution

           Update the theme. 

EPSS

0.002

Percentile

54.4%

Related for PATCHSTACK:7E964BA9FF7A136E4306531A88B177F8