Skip to content
Sign in
6.5 Medium

CVE-2024-47340 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Post…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Stored XSS.This issue affects Post Grid and Gutenberg Blocks: from n/a through <= 2.2.89.

Affected products and versions

Product Affected versions Fixed in
Post Grid and Gutenberg Blocks 2.2 earliest → 2.2.89 No fix stated

Other CVEs of Post Grid and Gutenberg Blocks

The 9 CVEs of Post Grid and Gutenberg Blocks →
CVE-2025-68605 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Post… 6.5 Medium CVE-2025-63043 Authorization Bypass Through User-Controlled Key vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid… 5.3 Medium CVE-2025-66058 Missing Authorization vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting… 6.5 Medium CVE-2025-62924 Missing Authorization vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting… 6.5 Medium
Track this CVE