PostX – Gutenberg Post Grid Blocks < 3.0.6 – Reflected Cross-Site Scripting | CVE 2023-3992 | Plugin Vulnerabilities

Description

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Proof of Concept

Make a logged in admin open the URL below (the post value is the ID of a post/page created with the Site Builder of the plugin)

https://example.com/wp-admin/post.php?post=2358&action=edit&postx_type="><img+src%3Dx+onerror%3Dalert(/XSS/)>

Affects Plugins

Fixed in 3.0.6

References

CVE

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CVSS

Miscellaneous

Original Researcher

Bob Matyas

Submitter

Bob Matyas

Submitter website

https://www.bobmatyas.com

Submitter twitter

Verified

Yes

WPVDB ID

c43b669f-0377-4402-833c-817b75001888

Timeline

Publicly Published

2023-08-02 (about 2 years ago)

Added

2023-08-02 (about 2 years ago)

Last Updated

2023-08-02 (about 2 years ago)

Other

Published

Title

Published

2022-05-02

Title

Google XML Sitemap Generator < 2.0.4 - Reflected Cross-Site Scripting

Published

2017-05-16

Title

WordPress Button Plugin MaxButtons <= 6.18 - Authenticated Cross-Site Scripting (XSS)

Published

2022-01-12

Title

Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.31 - Reflected Cross-Site Scripting

Published

2020-06-11

Title

WordPress < 5.4.2 - Authenticated Stored XSS via Theme Upload

Published

2025-05-30

Title

Daisycon prijsvergelijkers < 5.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting