I created a Wordpress theme for my client. He told me that he scanned my theme with a vulnerability scanner, and that it has security issues with the GET and
windows.location methods. Is this really insecure? How can I fix this?
The errors look like:
Medium / CVSS Base Score : 4.3(CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N)
Using the GET HTTP method, the scanner found that:
+ The following resources may be vulnerable to cross-site scripting (quick test) : + The 'product_quantity' parameter of the /pink-drool-proof-bib/ CGI : /pink-drool-proof-bib/?product_quantity=--><script>alert(112)</script> Thanks