Is poste.io 2.5.21 affected?

There is no security source for this product yet, so vulnerabilities are unknown.

2.5.21 is the latest release of its track.