Lucene search
+L

3 matches found

RedhatCVE
RedhatCVE
added 2025/02/20 8:26 a.m.13 views

CVE-2025-0864

The Active Products Tables for WooCommerce. Use constructor to create tables plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'shortcodesset' parameter in all versions up to, and including, 1.0.6.6 due to insufficient input sanitization and output escaping. This makes ...

6.1CVSS6.4AI score0.00432EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/18 7:28 a.m.12 views

CVE-2025-0864 Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.6 - Reflected Cross-Site Scripting

The Active Products Tables for WooCommerce. Use constructor to create tables plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'shortcodesset' parameter in all versions up to, and including, 1.0.6.6 due to insufficient input sanitization and output escaping. This makes ...

6.1CVSS6.1AI score0.00432EPSS
SaveExploits0References4
CVE
CVE
added 2025/02/18 7:28 a.m.122 views

CVE-2025-0864

CVE-2025-0864 affects the WordPress plugin Active Products Tables for WooCommerce. Use constructor to create tables. It is vulnerable to Reflected Cross-Site Scripting via the shortcodes_set parameter in all versions up to and including 1.0.6.6, allowing unauthenticated attackers to inject web sc...

6.1CVSS6.5AI score0.00432EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder