3 matches found
CVE-2023-0097
CVE-2023-0097 concerns the WordPress plugin Post Grid, Post Carousel, & List Category Posts (versions prior to 2.4.19). The issue arises because the plugin does not validate or escape certain block options before outputting them when the block is embedded, enabling Stored Cross-Site Scripting for...
CVE-2024-8187
The CVE-2024-8187 entry affects the Smart Post Show WordPress plugin (versions
CVE-2024-3996
The Smart Post Show WordPress plugin prior to version 2.4.28 is affected by a Stored XSS vulnerability due to inadequate sanitisation/escaping of certain settings. This could allow high-privilege users (e.g., admins) to inject script strings even when unfiltered_html is disallowed (notably in mul...