CVE-2023-1890

2023-05-1513:15:10

WPScan

web.nvd.nist.gov

cve-2023-1890

tablesome

wordpress

plugin

xss

security

nvd

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.003

Percentile

70.9%

JSON

The Tablesome WordPress plugin before 1.0.9 does not escape various generated URLs, before outputting them in attributes when some notices are displayed, leading to Reflected Cross-Site Scripting

Affected configurations

Nvd

Vulners

Node

paupletablesomeRange<1.0.9wordpress

VendorProductVersionCPE
paupletablesome*cpe:2.3:a:pauple:tablesome:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
pauple	tablesome	*	cpe:2.3:a:pauple:tablesome::::::wordpress::*

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "Tablesome",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "1.0.9"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]