Vulnerability · Published May 10, 2026 · Assigned by VulnCheck

CVE-2021-47929WordPress Plugin Filterable Portfolio Gallery 1.0 Stored XSS

Medium 6.4

In plain English

A medium-severity cross-site scripting in Filterable Portfolio Gallery from Filterable-Portfolio. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).

Severity (CVSS 3.1)6.4Medium

Exploit odds (30 days)0.2%top 90.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Filterable Portfolio Gallery 1.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript by entering payloads in the title field. Attackers can store JavaScript code like image tags with onerror handlers that execute when the gallery is previewed, affecting all users viewing the page.

Affected products (as reported)

Vendor	Product	Versions
Filterable-Portfolio	Filterable Portfolio Gallery	1.0

Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

References

ExploitDB-50458 exploit
Official Product Homepage product
Product Reference product
VulnCheck Advisory: WordPress Plugin Filterable Portfolio Gallery 1.0 Stored XSS third-party-advisory