CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
What the vulnerability does
A vulnerability classified as problematic has been found in Easy Table Plugin 1.6. This affects an unknown part of the file /wordpress/wp-admin/options-general.php. The manipulation with the input "><script>alert(1)</script> leads to basic cross site scripting. It is possible to initiate the attack remotely.
Explanation of Vulnerability in Simple Terms
The Easy Table Plugin contains a cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject malicious scripts into table data. The vulnerability requires user interaction—typically a victim must view a page containing the injected content. The flaw affects data integrity but does not expose sensitive information or disrupt site availability.
What an attacker can do
Inject malicious scripts that execute in the browser of users viewing affected tables.
Potential impact on your site
Authenticated users with low privileges can deface table content or steal session cookies from site visitors viewing those tables.
Conditions required to exploit
Attacker must have a low-privilege account (e.g., contributor or subscriber) and a victim must view the page with injected content.
Key dates
External resources
Related vulnerabilities
