= 2016_q2
The Truemag theme 2016 Q2 for WordPress has XSS via the s parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.