MEDIUM🇵🇱 Wersja polska

CVE-2024-12772

CVSS 5.4v3.1pub. 2025-01-31upd. 2025-03-28

The Ninja Tables WordPress plugin before 5.0.17 does not sanitize and escape a parameter before outputting it back in the page when importing a CSV, leading to a Cross Site Scripting vulnerability.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

  • Wpmanageninja Ninja Tables

    APP
    Wpmanageninja
    < 5.0.17
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
XSS
CWE
References

Related vulnerabilities

CVE-2025-2940HIGH7.2ten sam produkt

The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to Server-Side Request Forgery i...

CVE-2025-2939MEDIUM5.6ten sam produkt

The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to PHP Object Injection in all v...

CVE-2024-7304MEDIUM6.4ten sam produkt

The Ninja Tables – Easiest Data Table Builder plugin for WordPress is vulnerable to Stored Cross-Site Scriptin...

CVE-2024-23504MEDIUM5.3ten sam produkt

Missing Authorization vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/...

CVE-2024-23503MEDIUM4.3ten sam produkt

Missing Authorization vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/...