Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-19808
HistoryMar 02, 2022 - 12:00 a.m.

WordPress EditableTable plugin cross-site scripting vulnerability

2022-03-0200:00:00
China National Vulnerability Database
www.cnvd.org.cn
9

0.001 Low

EPSS

Percentile

25.0%

WordPress is the WordPress Foundation’s suite of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress EditableTable plugin versions prior to 0.1.4 have a cross-site scripting vulnerability that stems from the fact that the plugin does not clean up and escape any table and column fields, which can be exploited by attackers to execute JavaScript code on the client side.

CPENameOperatorVersion
wordpress editabletable pluginlt0.1.4

0.001 Low

EPSS

Percentile

25.0%