Not rated
CVE-2021-24660 The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10, with Saved Templates Addon enabled, allows…
Description
The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10, with Saved Templates Addon enabled, allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks via the plugin's shortcode.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PostX – Gutenberg Blocks for Post Grid 2.4 | earliest → < 2.4.10 | 2.4.10 |
Other CVEs of PostX – Gutenberg Blocks for Post Grid
The 4 CVEs of PostX – Gutenberg Blocks for Post Grid →
CVE-2021-24661
The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10, with Saved Templates Addon enabled, allows…
Not rated
CVE-2021-24659
The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 allows users with a role as low as Contributor…
Not rated
CVE-2021-24652
The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 performs incorrect checks before allowing…
Not rated