CVE-2024-4446

CVE-2024-4446 affects Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More (Gutenberg Blocks and Shortcode) for WordPress. The underlying issue is insufficient input sanitization and output escaping in the pagingType parameter, leading to a Stored Cross-Site Scripting opportun...

CVE-2024-4446 Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More (Gutenberg Blocks and Shortcode) <= 3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via pagingType Parameter

The Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More Gutenberg Blocks and Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘pagingType’ parameter in all versions up to, and including, 3.7.1 due to insufficient input sanitization and outpu...

WordPress Content Views Plugin <= 3.7.1 is vulnerable to Cross Site Scripting (XSS)

Software Content Views Type Plugin Vulnerable versions = 3.7.1 Fixed in 3.7.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4446 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID db0528283bdc Credits wesley wcraft Required...