CVE-2012-10017

A vulnerability was found in BestWebSoft Portfolio Plugin up to 2.04 on WordPress. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 2.06 is able to addres...

CVE-2012-10017 BestWebSoft Portfolio Plugin cross-site request forgery

A vulnerability was found in BestWebSoft Portfolio Plugin up to 2.04 on WordPress. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 2.06 is able to addres...

CVE-2012-10017

CVE-2012-10017 describes a cross-site request forgery in the BestWebSoft Portfolio Plugin for WordPress versions up to 2.04. The vulnerability is triggered via remote interaction and affects an unspecified part of the plugin; it does not detail the attack vector beyond CSRF. A fix is available in...

PT-2023-9954 · Bestwebsoft · Bestwebsoft Portfolio Plugin

Name of the Vulnerable Software and Affected Versions: BestWebSoft Portfolio Plugin versions up to 2.04 Description: A vulnerability was found in the BestWebSoft Portfolio Plugin, which has been classified as problematic. This issue affects an unknown part of the plugin and leads to cross-site...

CVE-2023-29097

Auth. author+ Stored Cross-Site Scripting XSS vulnerability in a3rev Software a3 Portfolio plugin = 3.1.0 versions...

CVE-2023-29097

Auth. author+ Stored Cross-Site Scripting XSS vulnerability in a3rev Software a3 Portfolio plugin = 3.1.0 versions...

Cross site scripting

Auth. author+ Stored Cross-Site Scripting XSS vulnerability in a3rev Software a3 Portfolio plugin = 3.1.0 versions...

CVE-2023-29097 WordPress a3 Portfolio Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)

Auth. author+ Stored Cross-Site Scripting XSS vulnerability in a3rev Software a3 Portfolio plugin = 3.1.0 versions...

CVE-2023-29097

CVE-2023-29097 is a Stored XSS vulnerability in the WordPress plugin a3 Portfolio (versions

PT-2023-22145 · Unknown · A3 Portfolio

Name of the Vulnerable Software and Affected Versions: a3 Portfolio plugin versions 3.1.0 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects authenticated users with author or higher privileges. This vulnerability allows an attacker to...

WordPress Easy Photography Portfolio Plugin <= 1.4.8 is vulnerable to Cross Site Scripting (XSS)

Software Easy Photography Portfolio Type Plugin Vulnerable versions = 1.4.8 Fixed in 1.4.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 0b3d61318ada Credits Rafie Muhammad Patchstack...

CVE-2023-2119 Responsive Filterable Portfolio <= 1.0.19 - Reflected Cross-Site Scripting

The Responsive Filterable Portfolio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the searchterm parameter in versions up to, and including, 1.0.19 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2023-23685

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in RadiusTheme Portfolio – WordPress Portfolio plugin = 2.8.10 versions...

CVE-2023-23685 WordPress Portfolio – WordPress Portfolio Plugin Plugin <= 2.8.10 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in RadiusTheme Portfolio – WordPress Portfolio plugin = 2.8.10 versions...

WordPress plugin Portfolio 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

CVE-2023-0497

The HT Portfolio WordPress plugin before 1.1.6 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack...

PT-2023-16308 · WordPress · Hm Portfolio

Name of the Vulnerable Software and Affected Versions: HT Portfolio WordPress plugin versions prior to 1.1.6 Description: The issue concerns a lack of CSRF check when activating plugins, which could allow attackers to make logged-in admins activate arbitrary plugins present on the blog via a CSRF...

WordPress Portfolio – WordPress Portfolio Plugin Plugin <= 2.8.10 is vulnerable to Cross Site Scripting (XSS)

Software Portfolio – WordPress Portfolio Plugin Type Plugin Vulnerable versions = 2.8.10 Fixed in 2.8.11 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23685 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 518a0520e6c9 Credit...

Cross site scripting

Unauthenticated Stored Cross-Site Scripting XSS vulnerability in Awesome Filterable Portfolio plugin = 1.9.7 at WordPress...

CVE-2022-40193 WordPress Awesome Filterable Portfolio plugin <= 1.9.7 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

Unauthenticated Stored Cross-Site Scripting XSS vulnerability in Awesome Filterable Portfolio plugin = 1.9.7 at WordPress...