CVE-2024-9051 WP Ultimate Post Grid <= 3.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpupg-grid-with-filters Shortcode

The WP Ultimate Post Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpupg-grid-with-filters shortcode in all versions up to, and including, 3.9.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible...

WordPress WP Ultimate Post Grid Plugin <= 3.9.3 is vulnerable to Cross Site Scripting (XSS)

Software WP Ultimate Post Grid Type Plugin Vulnerable versions = 3.9.3 Fixed in 4.0.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9051 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 89691df460f9 Credits Peter Thaleikis...