TI-2024-23577 CVE-2024-35708 · GHSA-fc49-wgh2-47f2WordPress Rife Free theme <= 2.4.19 - Cross Site Scripting (XSS) vulnerabilityPriority LOW 28Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in apollo13themes Rife Free allows Stored XSS.This issue affects Rife Free: from n/a through 2.4.19.CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00261 · Published 2024-06-08 · No fix listed CWE-79