CVE-2024-13851

CVE-2024-13851 concerns the WordPress plugin Modal Portfolio. The vulnerability is a Stored Cross-Site Scripting (XSS) in versions up to 1.7.4.2, caused by insufficient input sanitization and output escaping. It requires an attacker with Administrator-level privileges to inject scripts that execu...