Security Advisory
CVE-2017-13138
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
DOM based Cross-site scripting (XSS) vulnerability in the Bridge theme before 11.2 for WordPress allows remote attackers to inject arbitrary JavaScript.