CVE-2026-4126: Exposure of Sensitive Information to an Unauthorized Actor

The Table Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.0 via the 'tablemanager' shortcode. The shortcode handler tablemanagerrendertableshortcode takes a user-controlled table attribute, applies only sanitizekey for...

CVE-2023-47990: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in components/tablemanager/html/editadmintable.php in CuppaCMS V1.0 allows attackers to run arbitrary SQL commands via the table parameter...

CVE-2022-24266

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/tablemanager/ via the orderby parameter...

Sql injection

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/tablemanager/ via the searchword parameter...

CVE-2022-24266

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/tablemanager/ via the orderby parameter...

CVE-2022-24266

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/tablemanager/ via the orderby parameter...

CVE-2022-24264

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/tablemanager/ via the searchword parameter...

CVE-2022-24266: Improper Neutralization of Special Elements used in an SQL Command

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/tablemanager/ via the orderby parameter...

CVE-2022-24264: Improper Neutralization of Special Elements used in an SQL Command

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/tablemanager/ via the searchword parameter...

CVE-2018-19918: Improper Neutralization of Input During Web Page Generation

CuppaCMS has XSS via an SVG document uploaded to the administrator//component/tablemanager/view/cuviews URI...

CVE-2018-17300

Stored XSS exists in CuppaCMS through 2018-09-03 via an administrator//component/tablemanager/view/cumenus section name...

CVE-2018-17300: Improper Neutralization of Input During Web Page Generation

Stored XSS exists in CuppaCMS through 2018-09-03 via an administrator//component/tablemanager/view/cumenus section name...