CVE-2021-24900

The Ninja Tables WordPress plugin before 4.1.8 does not sanitise and escape some of its table fields, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

PT-2025-1947

Name of the Vulnerable Software and Affected Versions The Ninja Tables WordPress plugin versions prior to 5.0.17 Description The issue arises from the plugin not sanitizing and escaping a parameter before outputting it back in the page when importing a CSV, leading to a Cross Site Scripting issue...