Vulnerabilities > Themify > Portfolio Post > 1.2.1

DATE CVE VULNERABILITY TITLE RISK
2023-05-10 CVE-2022-32970 Cross-site Scripting vulnerability in Themify Portfolio Post
Auth.
network
low complexity
themify CWE-79
5.4
2023-02-13 CVE-2023-0362 Unspecified vulnerability in Themify Portfolio Post
Themify Portfolio Post WordPress plugin before 1.2.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
network
low complexity
themify
5.4