Input validation vulnerability in Eunice *

The Eunice theme for WordPress is vulnerable to a type of attack called Reflected Cross-Site Scripting. This type of attack happens when an unauthenticated attacker is able to inject malicious code into a page which is then executed if a user performs an action like clicking a link. This vulnerability exists in all known versions of the Eunice theme due to an unspecified parameter not being properly protected from malicious input and not being correctly escaped when output.