Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2024-12772

Ninja Tables < 5.0.17 - Admin+ Stored XSS

Description

The Ninja Tables WordPress plugin before 5.0.17 does not sanitize and escape a parameter before outputting it back in the page when importing a CSV, leading to a Cross Site Scripting vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Ninja Tables

Default version status: unaffected

  • 0 to < 5.0.17affected

References