CVE-2016-10993

The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter...

CVE-2016-10993

CVE-2016-10993 affects the WordPress ScoreMe theme (through 2016-04-01). The connected document provides concrete details: a reflected cross-site scripting (XSS) vulnerability via the s parameter, enabling an attacker to run arbitrary JavaScript in the victim’s browser. This can lead to session c...