title: Mediumish <= 1.0.47 - Unauthenticated Reflected Cross-Site Scripting (XSS)
description: The search feature of the Mediumish WordPress theme through 1.0.47 does not properly sanitise it's 's' GET parameter before output it back the page, leading to the Cross-SIte Scripting issue.
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: Mediumish
vendor: WowThemes
versions:
lessThanOrEqual: 1.0.47, status: affected, version: 1.0.47, versionType: custom
}