TI-2023-03680 CVE-2023-3962 · GHSA-r738-3h9r-fpvvWinters <= 1.4.3 - Prototype Pollution to Reflected Cross-Site ScriptingPriority LOW 28The Winters theme for WordPress is vulnerable to Reflected Cross-Site Scripting via prototype pollution in versions up to, and including, 1.4.3 due to insufficient input sanitization and output escaping.CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00449 · Published 2023-10-20 · No fix listed CWE-79