TI-2024-05883 CVE-2024-6339 · GHSA-mghf-9p6c-3946Phlox PRO <= 5.16.4 - Reflected Cross-Site Scripting via Search ParametersPriority LOW 27The Phlox PRO theme for WordPress is vulnerable to Reflected Cross-Site Scripting via search parameters in all versions up to, and including, 5.16.4 due to insufficient input sanitization and output escaping.CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00403 · Published 2024-08-21 · No fix listed CWE-79