Input validation vulnerability in T1 Theme 19.0

The T1 Theme for WordPress is vulnerable to a type of attack known as an Open Redirect. This type of attack can allow unauthenticated attackers to redirect users to malicious websites if the users can be tricked into performing some kind of action. This vulnerability affects all versions of the T1 Theme up to and including version 19.0 because there is not enough validation in place to make sure the redirect url supplied through the ‘url_js’ parameter is correct.