Medium · 6.5 CVE-2024-43305 EUVD-2024-40197GHSA-w8m3-qvxw-x4hh

WordPress Custom Layouts – Post + Product grids made easy plugin <= 1.4.11 - Cross Site Scripting (XSS) vulnerability

Published Aug 18, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Code Amp Product: Custom Layouts – Post + Product grids made easy

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Code Amp Custom Layouts – Post + Product grids made easy allows Stored XSS.This issue affects Custom Layouts – Post + Product grids made easy: from n/a through 1.4.11.

Affected products

Vendor	Product	Affected	Fixed
Code Amp	Custom Layouts – Post + Product grids made easy	≤ 1.4.11	—

References

https://patchstack.com/database/vulnerability/custom-layouts/wordpress-custom-layouts-post-product-grids-made-easy-plugin-1-4-11-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry