TI-2015-00840 CVE-2015-0901 · GHSA-38gw-wmv7-g95wCross-site scripting (XSS) vulnerability in the duwasai flashy theme 1.3 and earlier for…Priority LOW 24Cross-site scripting (XSS) vulnerability in the duwasai flashy theme 1.3 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01959 · Published 2015-03-31 · No fix listed CWE-79