cve/2023/CVE-2023-1890.md

CVE-2023-1890

Description

The Tablesome WordPress plugin before 1.0.9 does not escape various generated URLs, before outputting them in attributes when some notices are displayed, leading to Reflected Cross-Site Scripting

POC

Reference

• http://packetstormsecurity.com/files/173727/WordPress-Tablesome-Cross-Site-Scripting.html
• https://wpscan.com/vulnerability/8ef64490-30cd-4e07-9b7c-64f551944f3d

Github

No PoCs found on GitHub currently.