Behance Portfolio Manager, CVE-2025-57913

CVE, Research URL: CVE-2025-57913
Home page URL: Security reports for Behance Portfolio Manager
Application: Behance Portfolio Manager
Published on: Sep 23, 2025
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eleopard Behance Portfolio Manager portfolio-manager-powered-by-behance allows Stored XSS.This issue affects Behance Portfolio Manager: from n/a through <= 1.7.5.
Affected versions: max 1.8.0.
Status: vulnerable