TI-2024-22124 CVE-2024-33537 · GHSA-g7qj-fx7v-pm5jWordPress WP Portfolio theme <= 2.4 - Cross Site Scripting (XSS) vulnerabilityPriority LOW 29Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Theme Horse WP Portfolio allows Stored XSS.This issue affects WP Portfolio: from n/a through 2.4.CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00351 · Published 2024-04-29 · No fix listed CWE-79