CVE-2015-6584

CVE-2015-6584 is a cross-site scripting (XSS) vulnerability in the DataTables jQuery plugin (1.10.8 and earlier). The issue allows remote attackers to inject arbitrary script/HTML via the scripts parameter in media/unit_testing/templates/6776.php. Affected product: DataTables jQuery plugin (versi...

CVE-2021-36713

CVE-2021-36713: Cross-Site Scripting (XSS) in the DataTables plug-in for jQuery (version 1.9.2) allows attackers to run arbitrary code via the sBaseName parameter to the function _fnCreateCookie. Documented references point to 2012-era 1.9.2 release; connected sources confirm this as the affected...

CVE-2025-11031

CVE-2025-11031 affects DataTables up to version 1.10.13. The issue stems from path traversal caused by manipulation of the src argument in an unknown function within /examples/resources/examples.php, which could be triggered remotely. An exploit has been published; upgrading to DataTables 1.10.15...