CVE-2011-3861

The CVE-2011-3861 entry concerns the Web Minimalist 200901 WordPress theme. Affected component: the theme’s index.php handling of PATH_INFO enables cross-site scripting (XSS). Root cause: improper sanitization of PATH_INFO allows remote attackers to inject arbitrary web script or HTML. Impact: at...