Security Advisory

CVE-2021-24986

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-04-11 14:40:35

Last updated 2024-08-03 19:49:14

Assigner WPScan

State PUBLISHED

Description

The Post Grid WordPress plugin before 2.1.16 does not escape the keyword parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting in pages containing a Post Grid with a search form

← Browse all CVEs View on cve.org ↗