The Tablesome WordPress plugin before 1.0.9 does not escape various generated URLs, before outputting them in attributes when some notices are displayed, leading to Reflected Cross-Site Scripting
References
Link | Resource |
---|---|
http://packetstormsecurity.com/files/173727/WordPress-Tablesome-Cross-Site-Scripting.html | Exploit Third Party Advisory VDB Entry |
https://wpscan.com/vulnerability/8ef64490-30cd-4e07-9b7c-64f551944f3d | Exploit |
Configurations
History
No history.
Information
Published : 2023-05-15 13:15
Updated : 2023-11-07 04:05
NVD link : CVE-2023-1890
Mitre link : CVE-2023-1890
CVE.ORG link : CVE-2023-1890
JSON object : View
Products Affected
pauple
- tablesome
CWE
No CWE.