CVE-2015-9501

CVE-2015-9501 affects the WordPress Artificial Intelligence theme up to version 1.2.3 (before 1.2.4). The root cause is Genericons HTML files being placed under the web root, enabling cross-site scripting (XSS). The vulnerability is a DOM/XSS class issue in the theme that can allow an attacker to...