Medium severity6.1NVD Advisory· Published Aug 2, 2021· Updated Jun 17, 2026

CVE-2021-24488

Description

The slider import search feature and tab parameter of the Post Grid WordPress plugin before 2.1.8 settings are not properly sanitised before being output back in the pages, leading to Reflected Cross-Site Scripting issues

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Pickplugins/Post Grid
cpe:2.3:a:pickplugins:post_grid:*:*:*:*:*:wordpress:*:*
Range: <2.1.8
WordPress/Post Griddescription
WordPress/Post Gridllm-fuzzy
Range: <2.1.8
Package: https://wordpress.org/plugins/post-grid

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/1fc0aace-ba85-4939-9007-d150960add4anvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.009
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000