.. / CVE-2021-24488

• XSS
• Nuclei
• Web

Exploit for WordPress Post Grid <2.1.8 - Cross-Site Scripting (CVE-2021-24488)

Description:

WordPress Post Grid plugin before 2.1.8 contains a reflected cross-site scripting vulnerability. The slider import search feature and tab parameter of thesettings are not properly sanitized before being output back in the pages,

Nuclei Template

View the template here CVE-2021-24488.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-24488.yaml

References: