What’s Vulnerable › Vulnerabilities

CVE-2021-47929: WordPress Plugin Filterable Portfolio Gallery 1.0 Stored XSS

• Severity: medium (CVSS 6.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-10 · updated 2026-07-25
• Weakness: CWE-79

Description

Filterable Portfolio Gallery 1.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript by entering payloads in the title field. Attackers can store JavaScript code like image tags with onerror handlers that execute when the gallery is previewed, affecting all users viewing the page.

Affected products

• Filterable-Portfolio Filterable Portfolio Gallery: 1.0

References

• http://www.filterable-portfolio.com/
• https://wordpress.org/plugins/fg-gallery/
• https://www.exploit-db.com/exploits/50458
• https://www.vulncheck.com/advisories/wordpress-plugin-filterable-portfolio-gallery-stored-xss

Get alerted when CVE-2021-47929 or the next vulnerability affects your stack