WordPress Morning Coffee Theme 3.5 - Cross Site Scripting

WordPress Morning Coffee theme's "index.php" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can ste...

WordPress Theme Morning Coffee 3.5 - index.php Cross-Site Scripting

WordPress Theme Morning Coffee 3.5 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/49878/info The Morning Coffee theme for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this...

CVE-2011-3862

Cross-site scripting XSS vulnerability in the Morning Coffee theme before 3.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...

CVE-2011-3862

Cross-site scripting XSS vulnerability in the Morning Coffee theme before 3.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...

CVE-2011-3862

The CVE-2011-3862 issue affects the WordPress Morning Coffee theme prior to 3.6. The vulnerability is a Cross-Site Scripting (XSS) flaw in the theme’s index.php handling via PATH_INFO, enabling remote attackers to inject arbitrary script or HTML in the victim’s browser. Impact per sources include...