Test ID:	1.3.6.1.4.1.25623.1.0.802250
Category:	Web application abuses
Title:	WordPress Multiple Themes 's' Parameter Cross Site Scripting Vulnerabilities
Summary:	at least one Theme of WordPress is prone to a cross site scripting vulnerability.
Description:	Summary: at least one Theme of WordPress is prone to a cross site scripting vulnerability. Vulnerability Insight: The flaws are due to improper validation of user-supplied input to the 's' Parameter in multiple themes. Vulnerability Impact: Successful exploitation will allow remote attackers to insert arbitrary HTML and script code, which will be executed in a user's browser session in the context of an affected site. Affected Software/OS: Atahualpa theme before 3.6.8 EvoLve theme before 1.2.6 ZenLite theme before 4.4 Cover WP theme before 1.6.6 F8 Lite theme before 4.2.2 Elegant Grunge theme before 1.0.4 Antisnews theme before 1.10 Pixiv Custom theme before 2.1.6 RedLine theme before 1.66 Solution: Update to latest version of the themes. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-3850 https://sitewat.ch/en/Advisories/8 https://wpvulndb.com/vulnerabilities/9788 http://secunia.com/advisories/46297 Common Vulnerability Exposure (CVE) ID: CVE-2011-3852 https://sitewat.ch/en/Advisories/10 Common Vulnerability Exposure (CVE) ID: CVE-2011-3854 https://sitewat.ch/en/Advisories/12 http://secunia.com/advisories/46296 Common Vulnerability Exposure (CVE) ID: CVE-2011-3855 https://sitewat.ch/en/Advisories/13 Common Vulnerability Exposure (CVE) ID: CVE-2011-3856 https://sitewat.ch/en/Advisories/14 Common Vulnerability Exposure (CVE) ID: CVE-2011-3857 https://sitewat.ch/en/Advisories/15 Common Vulnerability Exposure (CVE) ID: CVE-2011-3858 https://sitewat.ch/en/Advisories/16 Common Vulnerability Exposure (CVE) ID: CVE-2011-3860 BugTraq ID: 50334 http://www.securityfocus.com/bid/50334 https://sitewat.ch/en/Advisories/18 Common Vulnerability Exposure (CVE) ID: CVE-2011-3863 https://sitewat.ch/en/Advisories/22
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.