Medium severity6.8NVD Advisory· Published Jun 17, 2024· Updated Jun 17, 2026

CVE-2024-4305

Description

The Post Grid Gutenberg Blocks and WordPress Blog Plugin WordPress plugin before 4.1.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Wpxpo/Postx
cpe:2.3:a:wpxpo:postx:*:*:*:*:*:wordpress:*:*
Range: <4.1.0
WordPress/Post Grid Gutenberg Blocks and WordPress Blog Plugindescription
WordPress/Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostXllm-fuzzy
Range: <4.1.0
WordPress/Post Grid and Gutenberg Blockswp-canonicalize

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/635be98d-4c17-4e75-871f-9794d85a2eb1/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000