Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-09996
HistoryFeb 10, 2022 - 12:00 a.m.

WordPress Ninja Tables plugin cross-site scripting vulnerability

2022-02-1000:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
wordpress
ninja tables
cross-site scripting
vulnerability
php
client-side javascript

EPSS

0.001

Percentile

36.0%

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. WordPress Ninja Tables plugin has a cross-site scripting vulnerability in versions prior to 4.1.8. The vulnerability stems from the plugin not cleaning and escaping some of its table fields, which could be exploited by an attacker to execute client-side JavaScript code.

EPSS

0.001

Percentile

36.0%