< 2.0
2.0
The Pinfinity theme before 2.0 for WordPress has XSS via the s parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.