CVE-2021-24488

The slider import search feature and tab parameter of the Post Grid WordPress plugin before 2.1.8 settings are not properly sanitised before being output back in the pages, leading to Reflected Cross-Site Scripting issues

CVSS v3.1

6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

11.24% chance of exploitation in the next 30 days, 96th percentile

Nuclei

medium · CWE-79

Published

2021-08-02

Updated

2024-08-03

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/1fc0aace-ba85-4939-9007-d150960add4a

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24488.yaml

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/50705

References

• CVE Record
• NVD entry

Related

• CVE-2021-24487
• CVE-2021-24489
• CVE-2021-24486
• CVE-2021-24490
• CVE-2021-24485
• CVE-2021-24491