CVE-2011-3864

Cross-site scripting XSS vulnerability in the The Erudite theme before 2.7.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cpage parameter...

CVE-2011-3864

Vulnerability summary (CVE-2011-3864) : The WordPress theme “The Erudite” is vulnerable in versions prior to 2.7.9. The issue is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the query parameter cpage . Underlying cause: improper sanitiz...