CVE-2011-3853

Cross-site scripting XSS vulnerability in the Hybrid theme before 0.10 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cpage parameter...

CVE-2011-3853

CVE-2011-3853 affects the WordPress Hybrid theme prior to 0.10. The vulnerability is a cross-site scripting (XSS) flaw triggered via the cpage parameter, allowing remote attackers to inject arbitrary script or HTML in the context of the affected site. The root cause is insufficient input cleanup ...