Title: Fix manually XSS problem?
Last modified: August 24, 2016

---

# Fix manually XSS problem?

 *  [dararede](https://wordpress.org/support/users/dararede/)
 * (@dararede)
 * [11 years, 4 months ago](https://wordpress.org/support/topic/fix-manually-xss-problem/)
 * Hi! I am using Hueman theme that is heavily modified and I can’t just update 
   to newer version. However I see this theme was affected with XSS vulnerability,
   so can you tell me what code needs to be changed/fixed?
 * Thanks!

Viewing 2 replies - 1 through 2 (of 2 total)

 *  [DhruvKanojia](https://wordpress.org/support/users/dhruvkanojia/)
 * (@dhruvkanojia)
 * [11 years, 4 months ago](https://wordpress.org/support/topic/fix-manually-xss-problem/#post-6088167)
 * It’s not that easy to fix it up. Because XSS is a big problem and the only fix
   I’d suggest is to update…. But, you can’t do that because I take it that you 
   are not using child themes….
 * I’d say.. post your query here and directly from the HUEMAN team :-
 * [https://wordpress.org/support/theme/hueman](https://wordpress.org/support/theme/hueman)
 *  [bdbrown](https://wordpress.org/support/users/bdbrown/)
 * (@bdbrown)
 * [11 years, 4 months ago](https://wordpress.org/support/topic/fix-manually-xss-problem/#post-6088191)
 * Hi dararede. The theme code was updated on April 22. This is from the changelog:
 * > April 22 2015 – 1.5.5
   >  ====================================================
   > ======= – Updated to OptionTree 2.5.4 – XSS security fixes – Added additional
   > Google fonts
 * That version is waiting on wp.org review and being pushed to the theme repository.
   If you can’t upgrade your theme then probably the best option is to wait for 
   v1.5.5, download it to your computer, then do a file-by-file comparison between
   that version and your theme. Based on how old your theme is, there will be other
   changes and updates included in subsequent versions that are not related to the
   XSS update.
 * Even with that, additional vulnerabilities are still being discovered. See [this article](https://blog.sucuri.net/2015/04/critical-persistent-xss-0day-in-wordpress.html)
   for an example.

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Fix manually XSS problem?’ is closed to new replies.

 * ![](https://i0.wp.com/themes.svn.wordpress.org/hueman/3.7.27/screenshot.png)
 * Hueman
 * [Support Threads](https://wordpress.org/support/theme/hueman/)
 * [Active Topics](https://wordpress.org/support/theme/hueman/active/)
 * [Unresolved Topics](https://wordpress.org/support/theme/hueman/unresolved/)
 * [Reviews](https://wordpress.org/support/theme/hueman/reviews/)

 * 2 replies
 * 3 participants
 * Last reply from: [bdbrown](https://wordpress.org/support/users/bdbrown/)
 * Last activity: [11 years, 4 months ago](https://wordpress.org/support/topic/fix-manually-xss-problem/#post-6088191)
 * Status: not resolved