Hello,

Plugin: Huge IT Portfolio Gallery 1.5.7 https://wordpress.org/plugins/portfolio-gallery/

1. Reflected Cross-Site Scripting (XSS) 

Authenticated users (like editors) can inject html/js code (there is no CSRF protection).

Method: GET

Url: http://localhost/wp-admin/admin.php?page=portfolios_huge_it_portfolio&task=edit_cat&id=[xss]

Vulnerable parameters: id

Example PHP callstack:

Html_editportfolio   [/portfolio-gallery/admin/portfolios_view.php:372]

Verification: