CVE-2021-47929

MEDIUM

WordPress Plugin Filterable Portfolio Gallery 1.0 Stored XSS

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2021-47929 has a selected CVSS score of 5.1 (medium); EIP currently links 1 catalogued exploit.

Description

Filterable Portfolio Gallery 1.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript by entering payloads in the title field. Attackers can store JavaScript code like image tags with onerror handlers that execute when the gallery is previewed, affecting all users viewing the page.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated May 11, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Filterable Portfolio Gallery

Browse Filterable-Portfolio / Filterable Portfolio Gallery
CVE List1.0affected

Proofs of concept

1

Catalogued exploits

ExploitDBWordPress Plugin Filterable Portfolio Gallery 1.0 - 'title' Stored Cross-Site Scripting (XSS)ExploitDB exploitby Murat DEMİRCİNot analyzed1 file
ExploitDB
PoC details

References

5