CVE-2021-24986

CVE-2021-24986: Post Grid < 2.1.16 - Reflected Cross-Site Scripting via keyword

Vendor Unknown
Product Post Grid
Weakness CWE-79 · XSS
Published April 11, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Post Grid WordPress plugin before 2.1.16 does not escape the keyword parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting in pages containing a Post Grid with a search form

Key dates

02Disclosure timeline

April 11, 2022 CVE published
August 3, 2024 Record updated