Cross-Site Scripting Vulnerability in PickPlugins Post Grid and Gutenberg Blocks
CVE-2024-50432

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Post Grid And Gutenberg Blocks
Vendor
CVE Published:
28 October 2024

What is CVE-2024-50432?

A Cross-Site Scripting (XSS) vulnerability has been identified in the PickPlugins Post Grid and Gutenberg Blocks, enabling attackers to inject malicious scripts into web pages. This stored XSS issue can compromise user data and lead to unauthorized access. Affected versions range from n/a through 2.2.93, making it critical for users of these plugins to implement patches immediately to safeguard their applications.

Affected Version(s)

Post Grid and Gutenberg Blocks 0 <= 2.2.93

References

https://patchstack.com/database/Wordpress/Plugin/post-gri...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

.