WP Table Builder – WordPress Table Plugin, bb62da1ac01058372473aaf46a74aad99cc2ac89

CVE, Research URL: bb62da1ac01058372473aaf46a74aad99cc2ac89
Home page URL: Security reports for WP Table Builder – WordPress Table Plugin
Application: WP Table Builder – WordPress Table Plugin
Published on: Sep 27, 2021
Research Description: WP Table Builder – Drag & Drop Table Builder [wp-table-builder] < 1.3.10 WP Table Builder – WordPress Table Plugin <= 1.3.9 - Reflected Cross-Site Scripting The WP Table Builder – WordPress Table Plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘page’ parameter in versions up to, and including, 1.3.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Affected versions: max 1.3.10.
Status: vulnerable

WP Table Builder &#8211; WordPress Table Plugin, bb62da1ac01058372473aaf46a74aad99cc2ac89