Mediumish <= 1.0.60 - Reflected Cross-Site Scripting
mediumThe search feature of the Mediumish WordPress theme through 1.0.60 does not properly sanitise it's 's' GET parameter before output it back the page, leading to the Cross-SIte Scripting issue.
- CVSS:
- 6.1
- Affected:
- up to 1.0.60
- Fix:
- No patched version reported
- Disclosed:
- May 16, 2021