CVE Database /
CVE-2021-24986
CVE · Medium
CVE-2021-24986 — Post Grid [post-grid] < 2.1.16
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2021-24986
|
Post Grid [post-grid] < 2.1.16 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.1
|
< 2.1.16
|
2.1.16 |
2022-03-15 |
—
|
CVE-2021-24986
The Post Grid plugin prior to version 2.1.16 fails to properly sanitize the keyword parameter, allowing attackers to inject malicious scripts that are reflected back in page attributes. This vulnerability enables reflected cross-site scripting attacks on pages that display a Post Grid with search functionality enabled.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings