EPSS
Percentile
33.1%
includes/wizard/wizard.php in the Ocean Extra plugin through 1.5.8 for WordPress allows unauthenticated options changes and injection of a Cascading Style Sheets (CSS) token sequence.
blog.nintechnet.com/settings-change-and-css-injection-in-wordpress-ocean-extra-plugin/