CVE-2011-3860

The CVE-2011-3860 entry describes a cross-site scripting (XSS) vulnerability in the WordPress Cover WP theme prior to version 1.6.6. The issue affects the theme’s s parameter, allowing remote attackers to inject arbitrary scripts or HTML. Root cause is improper handling/cleanup of user input in t...