cleantalk
Vulnerabilities and Security Researches

Ninja Tables – Best Data Table Plugin for WordPress, CVE-2024-12772

CVE, Research URL

CVE-2024-12772

Published on
Jan 31, 2025
Research Description
The Ninja Tables WordPress plugin before 5.0.17 does not sanitize and escape a parameter before outputting it back in the page when importing a CSV, leading to a Cross Site Scripting vulnerability.
Affected versions
Min -, max 5.0.17.
Status
vulnerable