CVE-2022-2114: Improper Neutralization of Input During Web Page Generation

The Data Tables Generator by Supsystic WordPress plugin before 1.10.20 does not sanitise and escape some of its Table settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in...

WordPress plugin Data Tables Generator by Supsystic 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Data Tables Generator by Supsystic < 1.10.20 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of its Table settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup Create/edit a table, go to its settings, enabled...

WordPress Data Tables Generator by Supsystic plugin <= 1.10.19 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by iohex in WordPress Data Tables Generator by Supsystic plugin versions = 1.10.19. Solution Update the WordPress Data Tables Generator by Supsystic plugin to the latest available version at least 1.10.20...

WordPress Data Tables Generator by Supsystic plugin <= 1.9.96 - SQL injection (SQLi) vulnerability

SQL injection SQLi vulnerability found by Erik David Martin in WordPress Data Tables Generator by Supsystic plugin versions = 1.9.96. Solution Update the WordPress Data Tables Generator by Supsystic plugin to the latest available version at least 1.9.97...

Data Tables Generator by Supsystic < 1.10.1 - Authenticated Stored Cross-Site Scripting (XSS)

The "Editor" tab under the "Tables" section is vulnerable to stored XSS. It is possible to store XSS in all input fields as the code does not sanitise any of the user input. PoC Open a Table, go to the editor and enter a payload below in a cell, then save the Table = 1.9.99 - = 1.10.0 -...

WordPress Data Tables Generator by Supsystic plugin <= 1.9.96 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability found by Erik David Martin in WordPress Data Tables Generator by Supsystic plugin versions = 1.9.96. Solution Update the WordPress Data Tables Generator by Supsystic plugin to the latest available version at least 1.9.97...

WordPress Plugin Supsystic Data Tables Generator 1.9.96 - Multiple Vulnerabilities

Exploit Title: WordPress Plugin Supsystic Data Tables Generator 1.9.96 - Multiple Vulnerabilities Date: 24/07/2020 Exploit Author: Erik David Martin Vendor Homepage: https://supsystic.com/ Software Link: https://downloads.wordpress.org/plugin/data-tables-generator-by-supsystic.1.9.96.zip Category...

WordPress Data Tables Generator by Supsystic Plugin < 1.9.92 Multiple Vulnerabilities

The WordPress plugin Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

CVE-2020-12075

The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks capability checks for AJAX actions...

CVE-2020-12076

The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks CSRF nonce checks for AJAX actions. One consequence of this is stored XSS...

CVE-2020-12075

The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks capability checks for AJAX actions...

CVE-2020-12075

The data-tables-generator-by-supsystic plugin for WordPress (versions prior to 1.9.92 ) is vulnerable to a security flaw where it lacks sufficient capability checks for AJAX actions . This oversight allows for unauthorized access to specific actions, potentially leading to unauthorized data manip...

CVE-2020-12076

The WordPress plugin Data Tables Generator by Supsystic is vulnerable prior to version 1.9.92 due to missing CSRF nonce checks on AJAX actions, leading to stored XSS. Multiple sources (NVD/Red Hat/OpenVAS entries and related advisories) confirm this issue and its impact. Remediation: upgrade to 1...

CVE-2020-12076

The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks CSRF nonce checks for AJAX actions. One consequence of this is stored XSS...

CVE-2020-12076: Cross-Site Request Forgery (CSRF)

The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks CSRF nonce checks for AJAX actions. One consequence of this is stored XSS...

CVE-2020-12075: Incorrect Default Permissions

The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks capability checks for AJAX actions...

WordPress Permission Check Bypass Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. data-tables-generator-by-supsystic is a data table generator plugin used in it. A security vulnerability exists in the WordPress...

PT-2020-13027

Name of the Vulnerable Software and Affected Versions data-tables-generator-by-supsystic plugin versions prior to 1.9.92 Description The issue is related to the lack of capability checks for AJAX actions in the data-tables-generator-by-supsystic plugin for WordPress. Recommendations For versions...

PT-2020-13028

Name of the Vulnerable Software and Affected Versions data-tables-generator-by-supsystic plugin versions prior to 1.9.92 Description The issue is related to the lack of CSRF nonce checks for AJAX actions, which can lead to stored XSS. Recommendations For versions prior to 1.9.92, update to versio...