CVE-2017-13138 – Bridge - Creative Multipurpose WordPress Theme < 11.2 - Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2017-13138

08 Aug 2017 — DOM based Cross-site scripting (XSS) vulnerability in the Bridge theme before 11.2 for WordPress allows remote attackers to inject arbitrary JavaScript. Una vulnerabilidad Cross-Site Scripting (XSS) basada en DOM en el tema Bridge en versiones anteriores a la 11.2 para WordPress permite que atacantes remotos inyecten JavaScript arbitrario. • http://bridge.qodeinteractive.com/change-log • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •