Vulnerabilities and security researches forportfolio-manager-powered-by-behance portfolio-manager-powered-by-behance

Jan 10, 2026

CVE, Research URL: CVE-2025-59135
Home page URL: Security reports for Behance Portfolio Manager
Application: Behance Portfolio Manager
Date: Dec 31, 2025
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eLEOPARD Behance Portfolio Manager allows Stored XSS.This issue affects Behance Portfolio Manager: from n/a through 1.7.5.
Affected versions: max 1.7.5.
Status: vulnerable

CVE, Research URL: CVE-2025-59137
Home page URL: Security reports for Behance Portfolio Manager
Application: Behance Portfolio Manager
Date: Dec 31, 2025
Research Description: Cross-Site Request Forgery (CSRF) vulnerability in eLEOPARD Behance Portfolio Manager allows Stored XSS.This issue affects Behance Portfolio Manager: from n/a through 1.7.5.
Affected versions: max 1.7.5.
Status: vulnerable

Jun 15, 2025

CVE, Research URL: CVE-2025-29010
Home page URL: Security reports for Behance Portfolio Manager
Application: Behance Portfolio Manager
Date: Jun 06, 2025
Research Description: Missing Authorization vulnerability in eleopard Behance Portfolio Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Behance Portfolio Manager: from n/a through 1.7.4.
Affected versions: max 1.7.4.
Status: vulnerable

Apr 06, 2025

CVE, Research URL: CVE-2025-32124
Home page URL: Security reports for Behance Portfolio Manager
Application: Behance Portfolio Manager
Date: Apr 04, 2025
Research Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in eleopard Behance Portfolio Manager allows Blind SQL Injection. This issue affects Behance Portfolio Manager: from n/a through 1.7.4.
Affected versions: max 1.7.4.
Status: vulnerable

Apr 03, 2025

CVE, Research URL: CVE-2025-31526
Home page URL: Security reports for Behance Portfolio Manager
Application: Behance Portfolio Manager
Date: Mar 31, 2025
Research Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in eleopard Behance Portfolio Manager allows SQL Injection. This issue affects Behance Portfolio Manager: from n/a through 1.7.4.
Affected versions: max 1.7.4.
Status: vulnerable