CVE-2017-13138 – Bridge - Creative Multipurpose WordPress Theme < 11.2 - Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2017-13138

DOM based Cross-site scripting (XSS) vulnerability in the Bridge theme before 11.2 for WordPress allows remote attackers to inject arbitrary JavaScript. Una vulnerabilidad Cross-Site Scripting (XSS) basada en DOM en el tema Bridge en versiones anteriores a la 11.2 para WordPress permite que atacantes remotos inyecten JavaScript arbitrario. • http://bridge.qodeinteractive.com/change-log http://imgur.com/a/OT9vl https://wpvulndb.com/vulnerabilities/8892 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •