TI-2011-03409 CVE-2011-3856 · GHSA-h2vh-xjjf-w3cvCross-site scripting (XSS) vulnerability in the Elegant Grunge theme before 1.0.4 for…Priority LOW 26Cross-site scripting (XSS) vulnerability in the Elegant Grunge theme before 1.0.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0353 · Published 2011-09-28 · No fix listed CWE-79