Threats tagged 'ghsa-xr5c-327f-pm5q'

The Bootstrap Multi-language Responsive Portfolio plugin for WordPress versions up to and including 1.0 is vulnerable to stored cross-site scripting (XSS) via admin settings. This vulnerability arises from insufficient input sanitization and output escaping, allowing authenticated administrators to inject malicious scripts. The issue affects multi-site installations and sites where the unfiltered_html capability is disabled.