PT-2022-7981

CVE-2017-20108

Published

2022-06-29

Updated

2022-07-07

Description by

CVSS 3.1

5.4

Medium

MetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Easy Table Plugin version 1.6

Description A problematic issue has been found in the Easy Table Plugin, affecting an unknown part of the file /wordpress/wp-admin/options-general.php. The manipulation with the input "> leads to basic cross site scripting. It is possible to initiate the attack remotely.

Recommendations For Easy Table Plugin version 1.6, consider disabling access to the /wordpress/wp-admin/options-general.php file until a patch is available. Restrict input to prevent cross-site scripting attacks.

Exploitability

Exploit

Fix

Impacts

Researchers

Manuel Garcia Cardenas

Vendors

Affected products

Weakness enumeration

CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')

Related identifiers