Approved changes feed: RSS · Atom

cpe:2.3:a:wordpress:grid_shortcodes:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWordpress (21977de4-0364-5ea6-90ad-48069434cf00)
ProductGrid Shortcodes (dba22d79-a5d2-50d8-9a02-c0fc6d27fe20)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-1658 vulnerable 2026-06-08 06:27:14.020674 Grid Shortcodes < 1.1.1 - Contributor+ Stored XSS
The Grid Shortcodes WordPress plugin before 1.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
Published: 2024-03-18T15:15:26.211Z
Updated: 2025-03-27T21:13:53.350Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.