CVE-2011-3851

CVE-2011-3851 affects the WordPress News theme prior to version 0.2. The vulnerability is a cross-site scripting (XSS) flaw exploitable via the cpage parameter, enabling remote attackers to inject arbitrary script or HTML. Impact is focused on client-side execution of injected scripts; no mitigat...