Aller au contenu
Se connecter
Non notée

CVE-2022-0447 The Post Grid WordPress plugin before 2.1.16 does not sanitise and escape the post_types parameter before outputting…

Description

The Post Grid WordPress plugin before 2.1.16 does not sanitise and escape the post_types parameter before outputting it back in the response of the post_grid_update_taxonomies_terms_by_posttypes AJAX action, available to any authenticated users, leading to a Reflected Cross-Site Scripting

Produits et versions touchés

Produit Versions touchées Corrigé en
Post Grid 2.1 premières → < 2.1.16 2.1.16

Autres CVE de Post Grid

Les 3 CVE de Post Grid →
CVE-2021-24986 The Post Grid WordPress plugin before 2.1.16 does not escape the keyword parameter before outputting it back in an… Non notée CVE-2021-24488 The slider import search feature and tab parameter of the Post Grid WordPress plugin before 2.1.8 settings are not… Non notée
Suivre cette CVE