TI-2011-04484 CVE-2011-5207 · GHSA-4gp3-xg6h-2whjCross-site scripting (XSS) vulnerability in admin/OptionsPostsList.php in the…Priority LOW 27Cross-site scripting (XSS) vulnerability in admin/OptionsPostsList.php in the TheCartPress plugin for WordPress before 1.1.6 before 2011-12-31 allows remote attackers to inject arbitrary web script or HTML via the tcp_na…CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.04535 · Published 2012-10-04 · No fix listed CWE-79