CVE-2021-24986

PoC —

CVSS 3.1

6.1 medium

EPSS

<1%p55

Published

Apr 11, 2022 (Apr 11, 2022)

Modified

Jun 17, 2026

Description

The Post Grid WordPress plugin before 2.1.16 does not escape the keyword parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting in pages containing a Post Grid with a search form

Vendors: pickplugins
Products: post grid
Ecosystems: WordPress
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.