Lucene search
PRIOn knowledge basePRION:CVE-2020-9392HistoryMar 23, 2020 - 5:15 p.m.
Code injection
2020-03-2317:15:00
PRIOn knowledge base
www.prio-n.com
1
An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. Because there is no permission check on the ImportJSONTable, createFromTpl, and getJSONExportTable endpoints, unauthenticated users can retrieve pricing table information, create new tables, or import/modify a table.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pricing_table_by_supsystic | lt | 1.8.2 |
Related
nvd
nvd
CVE-2020-9392
2020-03-23 17:15:15
cve
cve
CVE-2020-9392
2020-03-23 17:15:15
cvelist
cvelist
CVE-2020-9392
2020-03-23 16:14:51
wpexploit
wpexploit
Pricing Table by Supsystic < 1.8.2 - Insecure Permissions on AJAX Actions
2020-02-25 00:00:00
wpvulndb
wpvulndb
Pricing Table by Supsystic < 1.8.2 - Insecure Permissions on AJAX Actions
2020-02-25 00:00:00
openvas
openvas
WordPress Pricing Table by Supsystic Plugin < 1.8.2 Multiple Vulnerabilities
2020-02-28 00:00:00