TI-2024-29646 CVE-2024-44057 · GHSA-cvq3-wg24-45v2WordPress Nirvana theme <= 1.6.3 - Cross Site Scripting (XSS) vulnerabilityPriority LOW 29Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Nirvana allows Stored XSS.This issue affects Nirvana: from n/a through 1.6.3.CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00296 · Published 2024-09-15 · No fix listed CWE-79