Input validation vulnerability in Restaurante 3.0.7

The Restaurante theme for WordPress has a security vulnerability called Reflected Cross-Site Scripting. This happens in versions up to and including 3.0.7 because the theme does not properly clean up user input or protect against malicious scripts. This means that someone who is not logged in could potentially add harmful code to a page and it will run if a user clicks on a link.