CVE-2011-3855

CVE-2011-3855 affects the WordPress F8 Lite theme prior to version 4.2.2. The vulnerability is a cross-site scripting (XSS) flaw exposed through the theme’s s parameter, allowing an attacker to inject arbitrary script/HTML. Root cause, as stated in multiple connected entries, is improper handling...