CVE-2017-1000227
Stored XSS in Salutation Responsive WordPress + BuddyPress Theme version 3.0.15 could allow logged-in users to do almost anything an admin can
Date published : 2017-11-17
https://security.dxw.com/advisories/stored-xss-salutation-theme/