EUVD-2011-3809

Malware in sbrugna...

CVE-2011-3852

Cross-site scripting XSS vulnerability in the EvoLve theme before 1.2.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...

WordPress EvoLve Theme 1.2.5 - Cross-Site Scripting

's' Parameter WordPress EvoLve theme's "s" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

WordPress Theme EvoLve 1.2.5 - 's' Cross-Site Scripting

source: https://www.securityfocus.com/bid/49872/info The EvoLve theme for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting us...

CVE-2011-3852

Cross-site scripting XSS vulnerability in the EvoLve theme before 1.2.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the EvoLve theme before 1.2.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2011-3852

Cross-site scripting XSS vulnerability in the EvoLve theme before 1.2.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2011-3852

The CVE-2011-3852 entry concerns the EvoLve WordPress theme (pre-1.2.6). The vulnerability is a cross-site scripting (XSS) flaw in the theme’s handling of the s parameter, allowing remote attackers to inject arbitrary script or HTML into victims’ browsers. The root cause is inadequate input clean...

PT-2011-4728 · Unknown · Evolve Theme

Name of the Vulnerable Software and Affected Versions: EvoLve theme versions prior to 1.2.6 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the s parameter. This can be exploited by sending malicious input to the vulnerable endpoint...