Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-47340 EUVD-2024-42376GHSA-mx9w-rcj5-fp9p

WordPress ComboBlocks plugin <= 2.2.89 - Cross Site Scripting (XSS) vulnerability

Published Oct 6, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Stored XSS.This issue affects Post Grid and Gutenberg Blocks: from n/a through <= 2.2.89.

Affected products

VendorProductAffectedFixed
PickPlugins Post Grid and Gutenberg Blocks ≤ 2.2.89 —

References