CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ka2 Custom DataBase Tables custom-database-tables allows Reflected XSS.This issue affects Custom DataBase Tables: from n/a through <= 2.1.34.
Explanation of Vulnerability in Simple Terms
Custom DataBase Tables versions 2.1.34 and earlier contain a cross-site scripting (XSS) vulnerability. An attacker can inject malicious scripts that execute in a victim's browser when they visit an affected page. The vulnerability requires user interaction and can affect other users or site functionality. Update to a version newer than 2.1.34 to remediate.
What an attacker can do
Inject malicious scripts that run in a victim's browser, potentially stealing session data or performing actions on their behalf.
Potential impact on your site
Site visitors can be compromised; attackers may steal admin sessions or deface content without needing to log in.
Conditions required to exploit
Victim must visit a page containing the attacker's malicious input; no authentication required.
Key dates
External resources
Related vulnerabilities
