Cross site scripting

Cross-site scripting XSS vulnerability in the uDesign aka U-Design theme 2.3.0 before 2.7.10 for WordPress allows remote attackers to inject arbitrary web script or HTML via a fragment identifier, as demonstrated by...

CVE-2015-7357

Cross-site scripting XSS vulnerability in the uDesign aka U-Design theme 2.3.0 before 2.7.10 for WordPress allows remote attackers to inject arbitrary web script or HTML via a fragment identifier, as demonstrated by...

CVE-2015-7357

CVE-2015-7357 is a DOM-based XSS in the WordPress uDesign (U-Design) theme. Affected versions are 2.3.0 prior to 2.7.10 (commonly noted as 2.3.0–2.7.9); a remote attacker could inject arbitrary script/HTML by supplying a fragment identifier (e.g., #). The vulnerability arises in how fragment iden...

WordPress uDesign Theme <= 2.7.9 - Cross Site Scripting

This WordPress uDesign theme is prone to a DOM cross site scripting vulnerability. Solution Update the theme...

uDesign Theme 1.8.0-2.7.9 - DOM Cross-Site Scripting (XSS)

The u-design WordPress theme was affected by a DOM Cross-Site Scripting XSS security vulnerability...