Security Advisory

CVE-2021-24986

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-04-11 14:40:35

Last updated 2024-08-03 19:49:14

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The Post Grid WordPress plugin before 2.1.16 does not escape the keyword parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting in pages containing a Post Grid with a search form

← Browse all CVEs View on cve.org ↗