cleantalk
Vulnerabilities and Security Researches

Tablesome – Responsive Table, Email Log, Form Automation – Contact Form 7, Elementor, WPForms, Gravity Forms, Fluen, CVE-2023-1890

CVE, Research URL

CVE-2023-1890

Published on
May 15, 2023
Research Description
The Tablesome WordPress plugin before 1.0.9 does not escape various generated URLs, before outputting them in attributes when some notices are displayed, leading to Reflected Cross-Site Scripting
Affected versions
max 1.0.15.
Status
vulnerable