CVE-2021-24900

The Ninja Tables WordPress plugin before 4.1.8 does not sanitise and escape some of its table fields, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2021-24900 Ninja Tables < 4.1.8 - Admin+ Stored Cross-Site Cross-Site Scripting

The Ninja Tables WordPress plugin before 4.1.8 does not sanitise and escape some of its table fields, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2021-24900

The CVE-2021-24900 entry concerns the WordPress Ninja Tables plugin prior to version 4.1.8. Affected: Ninja Tables WordPress plugin (component logic handling table fields). Root cause: insufficient sanitisation/escaping of certain table fields, enabling stored XSS when a high-privilege user can i...