plugin

Custom Post View Generator Vulnerabilities

1 known security issue reported for the Custom Post View Generator WordPress plugin. Most recent disclosed Aug 10, 2021.

1 medium

Running Custom Post View Generator on your site? Check whether your installed version is affected.

Scan your site free

Custom Post View Generator <= 0.4.6 - Reflected Cross-Site Scripting

medium

The create_post_page AJAX action of the Custom Post View Generator WordPress plugin through 0.4.6 (available to authenticated user) does not sanitise or escape user input before outputting it back in the response, leading to a Reflected Cross-Site issue.

CVSS:: 5.4
Affected:: up to 0.4.6
Fix:: No patched version reported
Disclosed:: Aug 10, 2021

CVE-2021-24605 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database