Input validation vulnerability in Fruitful 3.8.1

The Fruitful theme for WordPress is vulnerable to a type of attack called Reflected Cross-Site Scripting. This type of attack can let unauthenticated attackers, or attackers who don’t have access, inject malicious code into a page viewed by a user. This malicious code can run when the user performs an action such as clicking on a link. Versions of the theme before 3.8.1 have insufficient protection which makes this attack possible.