CVE-2022-2114 Data Tables Generator by Supsystic < 1.10.20 - Admin+ Stored Cross-Site Scripting

2022-07-1710:36:05

CWE-79

WPScan

www.cve.org

cve-2022-2114

supsystic

wordpress

stored cross-site scripting

table settings

admin

multisite

EPSS

0.001

Percentile

24.8%

JSON

The Data Tables Generator by Supsystic WordPress plugin before 1.10.20 does not sanitise and escape some of its Table settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed (for example in multisite setup)

CNA Affected

[
  {
    "product": "Data Tables Generator by Supsystic",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "1.10.20",
        "status": "affected",
        "version": "1.10.20",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/59911ba4-fa06-498a-9e7c-0c337cce691c

EPSS

0.001

Percentile

24.8%

JSON

Related for CVELIST:CVE-2022-2114