WordPress Mediumish Theme <=1.0.47 - Cross-Site Scripting
WordPress Mediumish theme 1.0.47 and prior contains an unauthenticated reflected cross-site scripting vulnerability. The 's' GET parameter is not properly sanitized by the search feature before it is output back on the page.
PoC 已收录mediumish
CVSS6.1EPSS 6.4%