WordPress ColorWay theme version 3.4.1 suffers from a cross site scripting vulnerability. Continue reading...