CVE-2023-0540 GS Filterable Portfolio < 1.6.1 - Contributor+ Stored XSS

The GS Filterable Portfolio WordPress plugin before 1.6.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attac...

CVE-2023-0540

CVE-2023-0540 affects the GS Filterable Portfolio WordPress plugin

WordPress GS Filterable Portfolio Plugin < 1.6.1 is vulnerable to Cross Site Scripting (XSS)

Software GS Filterable Portfolio Type Plugin Vulnerable versions 1.6.1 Fixed in 1.6.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0540 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 0a94bc0a776f Credits István Márto...