A vulnerability categorized as problematic has been discovered in p-themes Porto Theme up to 3.6.2 on WordPress. Affected is an unknown function. Such manipulation leads to cross site scripting.

This vulnerability is listed as CVE-2025-63066. The attack may be performed from remote. There is no available exploit.