CVE-2016-10961

The CVE-2016-10961 entry concerns the ColorWay WordPress theme prior to version 3.4.2, which is affected by a Cross‑Site Scripting (XSS) vulnerability exposed via the contactName parameter. The issue is documented across multiple sources, and the underlying cause is an XSS flaw in handling the co...