plugin

Portfolio Slideshow Vulnerabilities

2 known security issues reported for the Portfolio Slideshow WordPress plugin. Most recent disclosed Apr 23, 2023.

1 medium

Running Portfolio Slideshow on your site? Check whether your installed version is affected.

Scan your site free

Portfolio Slideshow [portfolio-slideshow] <= 1.13.0 (closed)

unknown

[en] Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in George Gecewicz Portfolio Slideshow plugin <= 1.13.0 versions.

Affected:
up to 1.13.0
Fixed in:
1.13.0
Disclosed:
Apr 23, 2023

CVE-2023-23717 on NVD →

Portfolio Slideshow <= 1.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

medium

The Portfolio Slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in versions up to, and including, 1.13.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-lev...

CVSS:
6.4
Affected:
up to 1.13.0
Fix:
No patched version reported
Disclosed:
Feb 17, 2023

CVE-2023-23717 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database