CVE-2011-5257

Classipress (WordPress theme) before 3.1.5 is affected by multiple XSS vulnerabilities via twitter_id and facebook_id widget parameters, and similar stored XSS risk via POST facebook_id/twitter_id in user profiles (