CVE-2016-1000115

Version 1.1.0 of the Huge-IT Portfolio Gallery manager is vulnerable to SQL Injection and XSS attacks. These vulnerabilities may allow attackers to execute unauthorized database queries and inject malicious JavaScript code.

Exploitation of these vulnerabilities could lead to data theft, account takeover, and deletion or modification of database records. Organizations should be aware of the potential consequences related to data security.

It is recommended to update the Huge-IT Portfolio Gallery manager to the latest version that addresses these vulnerabilities. Additionally, conducting a security audit of the application and implementing appropriate protections against SQL Injection and XSS attacks is advisable.