CVE-2021-24488

6.1 mediumEPSS 11%

Medium (6.1) in pickplugins post grid. EPSS 11% chance of exploitation in the next 30 days.

The slider import search feature and tab parameter of the Post Grid WordPress plugin before 2.1.8 settings are not properly sanitised before being output back in the pages, leading to Reflected Cross-Site Scripting issues

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 11% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-08-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

pickplugins:post_grid

References

https://wpscan.com/vulnerability/1fc0aace-ba85-4939-9007-d150960add4a
https://wpscan.com/vulnerability/1fc0aace-ba85-4939-9007-d150960add4a

Check your stack JSON