TI-2024-29541 CVE-2024-43952 · GHSA-328c-8rw4-p536WordPress Esotera theme <= 1.2.5.1 - Cross Site Scripting (XSS) vulnerabilityPriority LOW 29Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Esotera allows Stored XSS.This issue affects Esotera: from n/a through 1.2.5.1.CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00295 · Published 2024-08-29 · No fix listed CWE-79