Cross-site scripting (XSS) vulnerability in ThemeBeans Blooog theme 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the jQuery parameter to assets/js/jplayer.swf.Referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/89356http://packetstormsecurity.com/files/124240http://www.securityfocus.com/bid/64046
