PT-2021-16011 · WordPress · Post Grid

0Xb9 · Published 2021-08-02 · Updated 2021-08-10 · CVE-2021-24488

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Post Grid WordPress plugin versions prior to 2.1.8

Description The issue arises from the improper sanitization of the slider import search feature and the tab parameter in the plugin's settings, which can lead to Reflected Cross-Site Scripting issues.

Recommendations For versions prior to 2.1.8, update to version 2.1.8 or later to resolve the issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-24488

Affected Products

Post Grid

References · 4

• 🔥 https://wpscan.com/vulnerability/1fc0aace-ba85-4939-9007-d150960add4a · Exploit
• 🔥 https://exploit-db.com/exploits/50705 · Exploit
• https://osv.dev/vulnerability/CVE-2021-24488 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-24488 · Security Note