CVE-2023-1890
published 2023-05-15CVE-2023-1890: The Tablesome WordPress plugin before 1.0.9 does not escape various generated URLs, before outputting them in attributes when some notices are displayed…
PriorityP333medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EXPLOIT
EPSS
1.07%
60.6th percentile
The Tablesome WordPress plugin before 1.0.9 does not escape various generated URLs, before outputting them in attributes when some notices are displayed, leading to Reflected Cross-Site Scripting
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| pauple | tablesome | < 1.0.9 | 1.0.9 |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Nuclei
Tablesome < 1.0.9 - Cross-Site Scripting
nuclei·CVSS 6.1
CVE-2023-1890 [MEDIUM] Tablesome < 1.0.9 - Cross-Site Scripting
Tablesome alert`document_domain`")'
- 'contains(body_2, "tablesome")'
condition: and
# digest: 4a0a0047304502207729d7d9d1952eba318f2494c58dc3ad808539b3ccdfbac133c64a8df8349b5e022100e651494b972ea357a174b3738ce0a4d6d8f36eb33585f134beaebf69553529cd:922c64590222798bb761d5b6d8e72950
No writeups or analysis indexed.
http://packetstormsecurity.com/files/173727/WordPress-Tablesome-Cross-Site-Scripting.htmlhttps://wpscan.com/vulnerability/8ef64490-30cd-4e07-9b7c-64f551944f3dhttp://packetstormsecurity.com/files/173727/WordPress-Tablesome-Cross-Site-Scripting.htmlhttps://wpscan.com/vulnerability/8ef64490-30cd-4e07-9b7c-64f551944f3d
2023-05-15
Published