CVE-2025-1757 | portfoliohub WordPress Portfolio Builder Plugin up to 1.1.7 on WordPress Shortcode pfhub_portfolio_portfolio cross site scripting

A vulnerability was found in portfoliohub WordPress Portfolio Builder Plugin up to 1.1.7 on WordPress. It has been declared as problematic. This vulnerability affects the function pfhub_portfolio_portfolio of the component Shortcode Handler. The manipulation leads to cross site scripting.

This vulnerability was named CVE-2025-1757. The attack can be initiated remotely. There is no exploit available.