medium6.1Public exploit code
CVE-2021-24488
The slider import search feature and tab parameter of the Post Grid WordPress plugin before 2.1.8 settings are not properly sanitised before being output back …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WordPress Plugin Post Grid 2.1.1 - Cross Site Scripting (XSS)2022-02-02 · webapps · php
Impact
The slider import search feature and tab parameter of the Post Grid WordPress plugin before 2.1.8 settings are not properly sanitised before being output back in the pages, leading to Reflected Cross-Site Scripting issues
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pickplugins | Post Grid | before 2.1.8 |