A Cross-Site Scripting (XSS) vulnerability exists in Themeum Kirki kirki up to version 6.4.0 due to improper neutralization of script-related HTML tags. This vulnerability allows an attacker with low privileges to inject code that can be executed in the context of other users' browsers. The vulnerability has a medium severity rating with a CVSS score of 4.3. No public exploits or patches are currently documented.