CVE-2024-53788

Name of the Vulnerable Software and Affected Versions WordPress Portfolio Builder – Portfolio Gallery versions 1.1.7 and earlier

Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. The problem enables an attacker to inject malicious code into a website, potentially affecting users who visit the compromised page.

Recommendations For WordPress Portfolio Builder – Portfolio Gallery versions 1.1.7 and earlier, update to a version later than 1.1.7 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.