CVE-2021-24660: PostX Gutenberg Blocks Saved Templates Addon < 2.4.10 - Contributor+ Stored Cross-Site Scripting
The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10, with Saved Templates Addon enabled, allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks via the plugin's shortcode.
Other sources
The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10, with Saved Templates Addon enabled, allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks via the plugin's shortcode.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-24660?
CVE-2021-24660 is a vulnerability in the PostX - Gutenberg Blocks for Post Grid WordPress plugin before version 2.4.10 with the Saved Templates Addon enabled.
How severe is CVE-2021-24660?
CVE-2021-24660 has a severity score of 5.4, which is considered medium severity.
How does CVE-2021-24660 affect the PostX - Gutenberg Blocks for Post Grid plugin?
CVE-2021-24660 allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks via the plugin's shortcode.
Which version of the PostX - Gutenberg Blocks for Post Grid plugin is affected by CVE-2021-24660?
The PostX - Gutenberg Blocks for Post Grid plugin before version 2.4.10 is affected by CVE-2021-24660.
How can I fix CVE-2021-24660?
To fix CVE-2021-24660, it is recommended to update the PostX - Gutenberg Blocks for Post Grid plugin to version 2.4.10 or later.