Stored Cross-Site Scripting Vulnerability in Content Views Post Grid & Filter
CVE-2024-3929
6.4MEDIUM
Key Information:
- Vendor
Wordpress
- Vendor
- CVE Published:
- 25 April 2024
What is CVE-2024-3929?
The Content Views – Post Grid & Filter plugin for WordPress is susceptible to a serious Stored Cross-Site Scripting vulnerability through the Widget Post Overlay block. This issue arises from inadequate input sanitization and output escaping on user-supplied attributes. As a result, authenticated attackers with contributor-level access or higher can exploit this vulnerability by injecting arbitrary web scripts into pages. These scripts will be executed whenever a user accesses an affected page, posing significant security risks to users and the integrity of the website.
Affected Version(s)
Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More (Gutenberg Blocks and Shortcode) * <= 3.7.0