CVE-2017-10889

2017-11-1714:00:00

jpcert

www.cve.org

4.4 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.3%

JSON

TablePress prior to version 1.8.1 allows an attacker to conduct XML External Entity (XXE) attacks via unspecified vectors.

CNA Affected

[
  {
    "product": "TablePress",
    "vendor": "tablepress.org",
    "versions": [
      {
        "status": "affected",
        "version": "prior to version 1.8.1"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN05398317/index.html

wordpress.org/plugins/tablepress/#developers