CVE-2023-0097

CVE-2023-0097 concerns the WordPress plugin Post Grid, Post Carousel, & List Category Posts (versions prior to 2.4.19). The issue arises because the plugin does not validate or escape certain block options before outputting them when the block is embedded, enabling Stored Cross-Site Scripting for...

CVE-2024-3996

The Smart Post Show WordPress plugin prior to version 2.4.28 is affected by a Stored XSS vulnerability due to inadequate sanitisation/escaping of certain settings. This could allow high-privilege users (e.g., admins) to inject script strings even when unfiltered_html is disallowed (notably in mul...

CVE-2024-8187

The CVE-2024-8187 entry affects the Smart Post Show WordPress plugin (versions