CVE-2024-13566 WP DataTable <= 0.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter

The WP DataTable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 0.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

CVE-2024-13566

WP DataTable for WordPress is affected by a Stored Cross-Site Scripting (stored XSS) via the id parameter in all versions up to and including 0.2.6. Exploitation requires authenticated access at Contributor level or higher, enabling injection of scripts that execute when users load injected pages...