Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks, CVE-2022-0447
- CVE, Research URL
- Home page URL
- Application
- Published on
- Apr 11, 2022
- Research Description
- The Post Grid WordPress plugin before 2.1.16 does not sanitise and escape the post_types parameter before outputting it back in the response of the post_grid_update_taxonomies_terms_by_posttypes AJAX action, available to any authenticated users, leading to a Reflected Cross-Site Scripting
- Affected versions
-
Min -, max 2.1.16.
- Status
-
vulnerable