CVE-2024-13851

The Modal Portfolio plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.7.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject...

CVE-2024-13851

The Modal Portfolio plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.7.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject...

CVE-2024-13851

CVE-2024-13851 concerns the WordPress plugin Modal Portfolio. The vulnerability is a Stored Cross-Site Scripting (XSS) in versions up to 1.7.4.2, caused by insufficient input sanitization and output escaping. It requires an attacker with Administrator-level privileges to inject scripts that execu...