CVE-2021-24659

The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks via the plugin's block...

CVE-2021-24659 PostX Gutenberg Blocks for Post Grid < 2.4.10 - Contributor+ Stored Cross-Site Scripting

The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks via the plugin's block...

CVE-2021-24659

The CVE-2021-24659 entry concerns the WordPress plugin PostX – Gutenberg Blocks for Post Grid (versions before 2.4.10). The vulnerability allows stored cross-site scripting via the plugin’s blocks with user roles as low as Contributor. Root cause: input handling in the Block context enables injec...