CVE-2025-31847

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themelooks mFolio Lite mfolio-lite allows DOM-Based XSS.This issue affects mFolio Lite: from n/a through = 1.2.3...

CVE-2025-31847

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themelooks mFolio Lite mfolio-lite allows DOM-Based XSS.This issue affects mFolio Lite: from n/a through = 1.2.3...

PT-2025-14225 · Themelooks · Themelooks Mfolio Lite

Name of the Vulnerable Software and Affected Versions: themelooks mFolio Lite versions 1.2.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an attacker...