Easy Table Vulnerabilities

The Easy Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'easy_table_plugin_option' parameters in versions up to, and including, 1.6 due to insufficient input sanitization and output escaping. This makes it possible for administrator-level attackers to inject arbitrary web scripts in pages t...

CVSS:

6.1

Affected:

up to 1.6

Fixed in:

1.7

Disclosed:

Feb 16, 2017

CVE-2017-20108 on NVD →

The Easy Table plugin for WordPress is vulnerable to Cross-Site Scripting via easy-table-test-area parameter in versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping. This makes it possible for administrator-level attackers to inject arbitrary web scripts that execute in a vict...

CVSS:

6.4

Affected:

up to 1.5.3

Fixed in:

1.5.3

Disclosed:

Aug 10, 2015