title: Grid Kit Premium < 2.2.0 - Multiple Reflected Cross-Site Scripting
description: The grid-kit-premium WordPress plugin before 2.2.0 does not escape some parameters as well as generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin
problem types: CWE-79 Cross-Site Scripting (XSS)
affected:
{
vendor: Unknown
product: grid-kit-premium
versions:
status: affected, versionType: custom, version: 0, lessThan: 2.2.0
defaultStatus: unaffected
}