TI-2011-03414 CVE-2011-3861 · GHSA-f794-7cg5-gg7hCross-site scripting (XSS) vulnerability in the Web Minimalist 200901 theme before 1.2…Priority LOW 26Cross-site scripting (XSS) vulnerability in the Web Minimalist 200901 theme before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0353 · Published 2011-09-28 · No fix listed CWE-79