Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Post Grid 2.1.16 Clear all filters
TI-2022-00370 CVE-2022-0447 · GHSA-rgf7-3xqq-822p

Post Grid < 2.1.16 - Reflected Cross-Site Scripting via post_types

Priority LOW 29

The Post Grid WordPress plugin before 2.1.16 does not sanitise and escape the post_types parameter before outputting it back in the response of the post_grid_update_taxonomies_terms_by_posttypes AJAX action, available to…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00641 Published 2022-04-11 Fixed in 2.1.16 CWE-79
TI-2021-07265 CVE-2021-24986 · GHSA-hgmh-vm7j-q2wp

Post Grid < 2.1.16 - Reflected Cross-Site Scripting via keyword

Priority LOW 29

The Post Grid WordPress plugin before 2.1.16 does not escape the keyword parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting in pages containing a Post Grid with a search form

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-04-11 Fixed in 2.1.16 CWE-79