CVE-2011-3852

The CVE-2011-3852 entry concerns the EvoLve WordPress theme (pre-1.2.6). The vulnerability is a cross-site scripting (XSS) flaw in the theme’s handling of the s parameter, allowing remote attackers to inject arbitrary script or HTML into victims’ browsers. The root cause is inadequate input clean...