4 matches found
CVE-2011-3861
Cross-site scripting XSS vulnerability in the Web Minimalist 200901 theme before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...
CVE-2011-3861
The CVE-2011-3861 entry concerns the Web Minimalist 200901 WordPress theme. Affected component: the theme’s index.php handling of PATH_INFO enables cross-site scripting (XSS). Root cause: improper sanitization of PATH_INFO allows remote attackers to inject arbitrary web script or HTML. Impact: at...
PT-2011-4737 · WordPress · Web Minimalist 200901 Theme
Name of the Vulnerable Software and Affected Versions: Web Minimalist 200901 theme for WordPress version 1.2 and earlier Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to "index.php". Recommendations: For Web Minimali...