TI-2011-03418 CVE-2011-3865 · GHSA-xrj9-7qw9-gvw5Cross-site scripting (XSS) vulnerability in the Black-LetterHead theme before 1.6 for…Priority LOW 26Cross-site scripting (XSS) vulnerability in the Black-LetterHead theme before 1.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0353 · Published 2011-09-28 · No fix listed CWE-79