CVE-2026-56056: WordPress The Post Grid plugin <= 7.9.7 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid The Post Grid the-post-grid allows Stored XSS.This issue affects The Post Grid: from n/a through 7.9.7.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress The Post Grid pluginto a version that resolves this vulnerability.Fixed in 7.9.8
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates that an attacker needs low-level privileges. Exploitation also requires user interaction.
Can this be exploited remotely?
Yes. The network attack vector indicates the vulnerable functionality can be reached remotely, but the available data does not identify the specific affected feature or endpoint.
What versions are affected?
The available information identifies The Post Grid versions through 7.9.7 as affected. A fixed version is not provided.
What is the potential impact of successful exploitation?
This is a stored XSS issue. The supplied CVSS vector indicates low impact to confidentiality, integrity, and availability, with scope changed.