Internet-formation

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Internet-formation records in CISA KEV

No Internet-formation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wp-advanced-search 4 records HIGH Modal Portfolio 1 record LOW

Records

1 record in Modal Portfolio · all components

TI-2024-12872 CVE-2024-13851 · GHSA-fp3v-vr72-3gmh

Modal Portfolio <= 1.7.4.2 - Authenticated (Administrator+) Stored Cross-Site Scripting

LOW 24

The Modal Portfolio plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.7.4.2 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00246 Published 2025-02-28 No fix listed CWE-79

Open these records in search →

Critical	1
High	2
Medium	1
Low	1
No CVSS	0