A vulnerability classified as problematic has been found in Easy Table Plugin 1.6. This affects an unknown part of the file /wordpress/wp-admin/options-general.php. The manipulation with the input "><script>alert(1)</script> leads to basic cross site scripting. It is possible to initiate the attack remotely.
References
| Link | Resource |
|---|---|
| http://seclists.org/fulldisclosure/2017/Feb/24 | Exploit Mailing List Third Party Advisory |
| https://vuldb.com/?id.97119 | Third Party Advisory |
| http://seclists.org/fulldisclosure/2017/Feb/24 | Exploit Mailing List Third Party Advisory |
| https://vuldb.com/?id.97119 | Third Party Advisory |
Configurations
History
21 Nov 2024, 03:22
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 3.5
v3 : 3.5 |
| References | () http://seclists.org/fulldisclosure/2017/Feb/24 - Exploit, Mailing List, Third Party Advisory | |
| References | () https://vuldb.com/?id.97119 - Third Party Advisory |
07 Jul 2022, 12:23
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:easy_table_project:easy_table:*:*:*:*:*:wordpress:*:* | |
| CVSS |
v2 : v3 : |
v2 : 3.5
v3 : 5.4 |
| References | (MISC) https://vuldb.com/?id.97119 - Third Party Advisory | |
| References | (MISC) http://seclists.org/fulldisclosure/2017/Feb/24 - Exploit, Mailing List, Third Party Advisory | |
| CWE | CWE-79 |
29 Jun 2022, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-06-29 07:15
Updated : 2024-11-21 03:22
NVD link : CVE-2017-20108
Mitre link : CVE-2017-20108
CVE.ORG link : CVE-2017-20108
JSON object : View
Products Affected
easy_table_project
- easy_table