Cakifo 1.0 - 1.6.1 - Cross-Site Scripting
mediumCross-site scripting (XSS) vulnerability in the Cakifo theme 1.x before 1.6.2 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via crafted Exif data.
- CVSS:
- 6.1
- Affected:
- 1.0 – 1.6.1
- Fixed in:
- 1.6.2
- Disclosed:
- Sep 17, 2014