CVE-2023-2119: Responsive Filterable Portfolio <= 1.0.19 - Reflected Cross-Site Scripting
The Responsive Filterable Portfolio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the searchterm parameter in versions up to, and including, 1.0.19 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-2119.
What is the title of the vulnerability?
The title of the vulnerability is 'The Responsive Filterable Portfolio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting'.
What is the severity of CVE-2023-2119?
The severity of CVE-2023-2119 is medium.
What is the affected software for CVE-2023-2119?
The affected software for CVE-2023-2119 is the Responsive Filterable Portfolio plugin for WordPress, versions up to and including 1.0.19.
How can the vulnerability CVE-2023-2119 be exploited?
CVE-2023-2119 can be exploited by unauthenticated attackers injecting malicious code through the search_term parameter of the plugin.