Advisories · Technology
averta Premium Portfolio Features for Phlox theme.
Every CVE that names averta Premium Portfolio Features for Phlox theme among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.1 High
Premium Portfolio Features for Phlox theme <= 2.3.10 - Unauthenticated Local File Inclusion via args[extra_template_path]
- averta Premium Portfolio Features for Phlox theme
- File inclusion
- CVSS 6.4 Medium
Premium Portfolio Features for Phlox theme <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
- averta Premium Portfolio Features for Phlox theme
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Premium Portfolio Features for Phlox theme <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ' Grid Portfolios'
- averta Premium Portfolio Features for Phlox theme
- Cross-site scripting (XSS)