TI-2024-23580 CVE-2024-35711 · GHSA-x25g-vpwv-2vwjWordPress Event theme <= 1.2.2 - Cross Site Scripting (XSS) vulnerabilityPriority LOW 28Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Theme Freesia Event allows Stored XSS.This issue affects Event: from n/a through 1.2.2.CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.0027 · Published 2024-06-08 · No fix listed CWE-79