Vulners
Lucene search
| Reporter | Title | Published | Views | Family All 16 |
|---|---|---|---|---|
 | The vulnerability of the Tablesome plugin of the WordPress content management system allows attackers to perform cross-site scripting attacks. | 1 Nov 202300:00 | – | bdu_fstec |
 | CVE-2023-1890 | 15 May 202316:40 | – | circl |
 | WordPress plugin Tablesome 跨站脚本漏洞 | 15 May 202300:00 | – | cnnvd |
 | CVE-2023-1890 Tablesome < 1.0.9 - Reflected XSS | 15 May 202312:15 | – | cvelist |
 | EUVD-2023-24080 | 3 Oct 202520:07 | – | euvd |
 | Tablesome < 1.0.9 - Cross-Site Scripting | 17 Jul 202604:44 | – | nuclei |
 | CVE-2023-1890 | 15 May 202313:15 | – | nvd |
 | CVE-2023-1890 | 15 May 202313:15 | – | osv |
 | WordPress Tablesome Cross Site Scripting | 25 Jul 202300:00 | – | packetstorm |
 | WordPress Table & Contact Form 7 Database – Tablesome Plugin < 1.0.9 is vulnerable to Cross Site Scripting (XSS) | 19 Apr 202300:00 | – | patchstack |
10
[
{
"vendor": "Unknown",
"product": "Tablesome",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "1.0.9"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| a | query param | /wp-admin/edit.php?post_type=tablesome_cpt&a%22%3E%27%3E%3Cdetails%2Fopen%2Fontoggle%3Dconfirm%28%27XSS%27%29%3E | Reflected XSS via unescaped URL in admin notice without proper escaping | CWE-79 |
| tablesome_feature_notice_dismissed | query param | /wp-admin/edit.php?post_type=tablesome_cpt&tablesome_feature_notice_dismissed=1&</script><script>alert(/XSS/)</script> | Reflected XSS via extra query data in admin notice dismissal flow | CWE-79 |
| <<payload>> | query param | /wp-admin/edit.php?post_type=tablesome_cpt&tablesome_feature_notice_dismissed=1&</script><script>alert(/XSS/)</script> | Reflected XSS via extra query data in admin notice dismissal flow | CWE-79 |
| can_track_tablesome_events | query param | /wp-admin/edit.php?post_type=tablesome_cpt&can_track_tablesome_events=1&</script><script>alert(/XSS/)</script> | Reflected XSS via tracking flag in admin notices | CWE-79 |
| <<payload>> | query param | /wp-admin/edit.php?post_type=tablesome_cpt&can_track_tablesome_events=1&</script><script>alert(/XSS/)</script> | Reflected XSS via tracking flag in admin notices | CWE-79 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 05:28Current
6Medium risk
Vulners AI Score6
CVSS 3.16.1
EPSS0.01067
SSVC