Bug 385689

Summary:	(CVE-2011-3850) <www-apps/wordpress: Atahualpa Theme "s" Cross-Site Scripting Vulnerability
Product:	Gentoo Security	Reporter:	Michael Harrison <n0idx80>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED INVALID
Severity:	minor
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Michael Harrison 2011-10-05 06:45:29 UTC

Input passed via the "s" parameter to index.php is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.