CVE-2024-1333

The CVE-2024-1333 entry affects the WordPress plugin Responsive Pricing Table (dk-pricr-responsive-pricing-table) prior to version 5.1.11. Root cause: the plugin does not validate and escape certain Pricing Table options before output, enabling Stored XSS when a page/post is rendered with the rel...

CVE-2023-4810

CVE-2023-4810 affects the WordPress plugin Responsive Pricing Table (pre-5.1.8). The issue is failure to sanitise/escape certain settings, enabling a stored Cross‑Site Scripting (XSS) attack by high‑privilege users (e.g., admins), including when unfiltered_html is disallowed (such as multisite). ...

CVE-2022-46855

CVE-2022-46855 is a Stored Cross-Site Scripting (XSS) in the WP Darko Responsive Pricing Table plugin, affected versions ≤ 5.1.6. The root cause is insufficient sanitization/escaping of the fields.title parameter, which can allow a contributor (and higher) to inject JavaScript. The vulnerability’...