Modern <= 1.4.1 - Cross-Site Scripting
mediumThe Modern theme before 1.4.2 for WordPress has XSS via the genericons/example.html anchor identifier.
- CVSS:
- 6.1
- Affected:
- up to 1.4.1
- Fixed in:
- 1.4.2
- Disclosed:
- May 12, 2015
theme
1 known security issue reported for the Modern WordPress theme. Most recent disclosed May 12, 2015.
Running Modern on your site? Check whether your installed version is affected.
Scan your site freeThe Modern theme before 1.4.2 for WordPress has XSS via the genericons/example.html anchor identifier.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free