6.1 Medium

CVE-2023-1890 The Tablesome WordPress plugin before 1.0.9 does not escape various generated URLs, before outputting them in attributes…

Description

The Tablesome WordPress plugin before 1.0.9 does not escape various generated URLs, before outputting them in attributes when some notices are displayed, leading to Reflected Cross-Site Scripting

Affected products and versions

Product	Affected versions	Fixed in
Tablesome 1.0	earliest → < 1.0.9	1.0.9

Do you use Tablesome?

Track this CVE Watch Tablesome Check my SBOMs

www.cveye.io/en/cve/CVE-2023-1890

Timeline

Published May 15, 2023
Last modified February 13, 2025

References

wpscan.com wpscan.com
packetstormsecurity.com packetstormsecurity.com

Track this CVE