Input validation vulnerability in Crius *

The Covert VideoPress Theme for WordPress has a security flaw that makes it vulnerable to Reflected Cross-Site Scripting. This flaw is caused by an outdated version of VideoJS that does not properly filter user inputs or escape output. This means that an attacker can inject malicious code into pages on the WordPress site. If a user clicks on a link containing this code, the code will execute.