CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Table Builder WP Table Builder wp-table-builder allows Reflected XSS.This issue affects WP Table Builder: from n/a through <= 2.0.5.
Explanation of Vulnerability in Simple Terms
WP Table Builder versions 2.0.5 and earlier contain a cross-site scripting (XSS) vulnerability that allows attackers to inject malicious scripts into table content. When a site visitor views a page containing an affected table, the attacker's code runs in their browser with access to their session. The vulnerability requires no authentication but does require user interaction—the victim must visit a page with the malicious table.
What an attacker can do
Inject JavaScript code that runs in visitors' browsers, stealing session cookies or performing actions on their behalf.
Potential impact on your site
Visitors' accounts and data at risk; attackers can steal credentials, deface content, or redirect users to malicious sites.
Conditions required to exploit
Victim must visit a page containing a table with injected malicious content; attacker needs ability to create or edit tables.
Key dates
External resources
Related vulnerabilities
