Dismissed
Permalink
CVE-2025-58245
5.9 MEDIUM
- CVSS version: 3.1
- Attack vector (AV): NETWORK
- Attack complexity (AC): LOW
- Privileges required (PR): HIGH
- User interaction (UI): REQUIRED
- Scope (S): CHANGED
- Confidentiality impact (C): LOW
- Integrity impact (I): LOW
- Availability impact (A): LOW
by @mweinelt Activity log
- Created automatic suggestion
-
@mweinelt
removed
2 packages
- traderepublic-portfolio-downloader
- portfolio-filemanager
- @mweinelt dismissed
WordPress Portfolio Plugin <= 2.58 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bestweblayout Portfolio allows DOM-Based XSS. This issue affects Portfolio : from n/a through 2.58.
References
Affected products
portfolio
- =<2.58