6.5
Medium
CVE-2025-68605 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Post…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Stored XSS.This issue affects Post Grid and Gutenberg Blocks: from n/a through <= 2.3.23.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Post Grid and Gutenberg Blocks 2.3 | earliest → 2.3.23 | No fix stated |
Other CVEs of Post Grid and Gutenberg Blocks
The 9 CVEs of Post Grid and Gutenberg Blocks →
CVE-2025-63043
Authorization Bypass Through User-Controlled Key vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid…
5.3
Medium
CVE-2025-66058
Missing Authorization vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting…
6.5
Medium
CVE-2025-62924
Missing Authorization vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting…
6.5
Medium
CVE-2025-54007
Deserialization of Untrusted Data vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Object…
8.8
High