WordPress Plugin Filterable Portfolio Gallery 1.0 Stored XSS
Vulnerability Description
Filterable Portfolio Gallery 1.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript by entering payloads in the title field. Attackers can store JavaScript code like image tags with onerror handlers that execute when the gallery is previewed, affecting all users viewing the page.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-47929
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Murat DEMIRCI (@butterflyhunt3r)
Affected Vendor
Filterable-Portfolio
View all reports →