This vulnerability in portfoliohub WordPress Portfolio Builder – Portfolio Gallery (up to version 1.1.7) involves improper neutralization of input during web page generation, leading to stored cross-site scripting (XSS). An attacker with high privileges and requiring user interaction can inject malicious scripts that may affect confidentiality, integrity, and availability to a limited extent. The vulnerability is network exploitable and affects the plugin's uber-grid feature.

Successful exploitation could allow an attacker with high privileges to inject malicious scripts that execute in the context of users viewing the affected pages, potentially leading to limited confidentiality, integrity, and availability impacts. There are no known exploits in the wild at this time.

No patch or official fix information is currently available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, restrict high-privilege user access and be cautious with user-generated content in the affected plugin. Monitor vendor channels for updates.