CVE-2023-23685: radiustheme portfolio – CVSS 5.4 · Watchpost

← All vulnerabilities

CVE-2023-23685

보통 5.4CVE-2023-23685 · Published 04/04/2023 · updated 17/06/2026

요약

CVE-2023-23685은(는) portfolio (radiustheme)에 영향을 주는 보통 (CVSS 5.4) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.36%, 전체 취약점의 29.9%보다 높음.
조치: 2.8.11 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
portfolio radiustheme	`< 2.8.11`	`2.8.11`

Description

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in RadiusTheme Portfolio – WordPress Portfolio plugin <= 2.8.10 versions.

References

patchstack.com/database/vulnerability/tlp-portfolio/wordpress-portfolio-wordpress-portfolio-plugin-plugin-2-8-10-cross-site-scripting-xss-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free