Vulnerabilities CVE-2021-47929

CVE-2021-47929

Medium

Open

TLP:CLEAR

WordPress Plugin Filterable Portfolio Gallery 1.0 Stored XSS

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Filterable Portfolio Gallery 1.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript by entering payloads in the title field. Attackers can store JavaScript code like image tags with onerror handlers that execute when the gallery is previewed, affecting all users viewing the page.

Details

CVSS Score: 5.1
EPSS Score ⓘ: 0.19%

9.3th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Confidence: 90%
Published: May 10, 2026
Last Modified: Jul 28, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.