Approved changes feed: RSS · Atom

cpe:2.3:a:netroics:netroics_blog_posts_grid:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNetroics (a3afc232-0216-5e09-9437-e501de00d19d)
ProductNetroics Blog Posts Grid (631d4e1d-6403-5af0-a6a4-b1e55dfe4fd5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-50946 vulnerable 2026-06-08 05:52:03.756728 WordPress Plugin Netroics Blog Posts Grid 1.0 Stored XSS
MEDIUM (6.4)
WordPress Plugin Netroics Blog Posts Grid 1.0 contains a stored cross-site scripting vulnerability that allows authenticated editors to inject malicious scripts by failing to sanitize the post_title parameter. Attackers with editor privileges can inject script payloads through the testimonial title field that execute in the browsers of other users viewing the draft post, enabling cookie theft and session hijacking.
Published: 2026-05-10T12:12:46.969Z
Updated: 2026-05-24T01:37:23.975Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.