WordPress Standard Theme w/ XSS Lücke