TI-2011-03415 CVE-2011-3862 · GHSA-ff8m-9rjv-2gh4Cross-site scripting (XSS) vulnerability in the Morning Coffee theme before 3.6 for…Priority LOW 26Cross-site scripting (XSS) vulnerability in the Morning Coffee theme before 3.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03676 · Published 2011-09-28 · No fix listed CWE-79