Aller au contenu
Se connecter
Non notée

CVE-2021-24986 The Post Grid WordPress plugin before 2.1.16 does not escape the keyword parameter before outputting it back in an…

Description

The Post Grid WordPress plugin before 2.1.16 does not escape the keyword parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting in pages containing a Post Grid with a search form

Produits et versions touchés

Produit Versions touchées Corrigé en
Post Grid 2.1 premières → < 2.1.16 2.1.16

Autres CVE de Post Grid

Les 3 CVE de Post Grid →
CVE-2022-0447 The Post Grid WordPress plugin before 2.1.16 does not sanitise and escape the post_types parameter before outputting… Non notée CVE-2021-24488 The slider import search feature and tab parameter of the Post Grid WordPress plugin before 2.1.8 settings are not… Non notée
Suivre cette CVE