Input validation vulnerability in Enfold – Responsive Multi-Purpose Theme 5.6.4

The Enfold – Responsive Multi-Purpose Theme for WordPress is vulnerable to a type of attack called Reflected Cross-Site Scripting in all versions up to and including version 5.6.4. This is because the theme does not properly sanitize and escape certain inputs and outputs. This makes it possible for unauthenticated attackers to inject malicious web scripts into pages, which can execute if the user is tricked into performing an action like clicking on a link.