Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget, CVE-2022-1266

CVE, Research URL: CVE-2022-1266
Home page URL: Security reports for Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget
Application: Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget
Published on: Jun 20, 2022
Research Description: The Post Grid, Slider & Carousel Ultimate WordPress plugin before 1.5.0 does not sanitise and escape the Header Title, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Affected versions: Min -, max 1.6.4.
Status: vulnerable

Post Grid, Slider &amp; Carousel Ultimate &#8211; with Shortcode, Gutenberg Block &amp; Elementor Widget, CVE-2022-1266