CVE-2021-24488

medium · 6.1

A public exploit / detection template exists

Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →

The slider import search feature and tab parameter of the Post Grid WordPress plugin before 2.1.8 settings are not properly sanitised before being output back in the pages, leading to Reflected Cross-Site Scripting issues

6.1

CVSS

11.2%

EPSS (exploit prob.)

96th

EPSS percentile

2021-08-02

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weaknesses

CWE-79

Affected products

Vendor	Product	Affected versions
pickplugins	post_grid	< 2.1.8

Check a specific version with /api/v1/cve/match.

References

https://wpscan.com/vulnerability/1fc0aace-ba85-4939-9007-d150960add4a
https://wpscan.com/vulnerability/1fc0aace-ba85-4939-9007-d150960add4a

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2021-24488