CVE-2024-12772 — Ninja Tables < 5.0.17 - Admin+ Stored XSS

CVE-2024-12772

Ninja Tables < 5.0.17 - Admin+ Stored XSS PUBLISHED

Description (CNA)

The Ninja Tables WordPress plugin before 5.0.17 does not sanitize and escape a parameter before outputting it back in the page when importing a CSV, leading to a Cross Site Scripting vulnerability.

Affected (CNA)

Vendor / product	Versions
Unknown / Ninja Tables	affected 0 before 5.0.17

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/7b6d0f95-6632-4079-8c1b-517a8d02c330/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.