Input validation vulnerability in Portfolio & Image Gallery for WordPress | PowerFolio 3.1

n The PowerFolio plugin for WordPress, which is used for creating portfolios and image galleries, has a security flaw that could allow hackers to insert malicious code into web pages. This can happen because the plugin does not properly filter and escape user input, making it vulnerable to a type of attack called Stored Cross-Site Scripting. This means that if an attacker has contributor-level or higher permissions, they can add harmful code to pages that will run whenever someone visits those pages.