Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designthemes DesignThemes Portfolio designthemes-portfolio allows Reflected XSS.This issue affects DesignThemes Portfolio: from n/a through <= 1.3.
CVE-2026-27385
NONE
EPSS 0.04%
Updated Mar 05, 2026
CVE Details
CVE ID
CVE-2026-27385
Published Date
Mar 05, 2026
Vendor
Not specified
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.04%
Likelihood of exploitation in next 30 days
Percentile:
11.8th percentile (higher than 11.8% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory