admin/cve
1
0 Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2026-10-27 16:51:03 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
main
cve/cves/2012/CVE-2012-20003.md
T
CVE-BOT 2f8797e3f4 Update CVE PoCs 2026-10-21
2026-10-21 07:55:22 +00:00

1.2 KiB
Raw Permalink Blame History

CVE-2012-20003

Custom Tables WordPress Plugin < 3.4.6 Reflected XSS via iframe.php

Description

Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the unsanitized 'key' parameter in iframe.php. Attackers can craft GET requests to /wp-content/plugins/custom-tables/iframe.php with s=1 and a malicious key value to execute script in victims' browsers and steal cookies. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-20.

POC

Reference

Github

No PoCs found on GitHub currently.

Reference in new issue View Git Blame Copy Permalink