Tableon
Monthly
Reflected cross-site scripting in the PluginUs.Net TableOn (posts-table-filterable) WordPress plugin affects versions through 1.0.7 and lets a remote, unauthenticated attacker craft a request or link that executes script in a victim's browser only after the victim interacts with it (CVSS UI:R). The available advisory does not identify the exact vulnerable parameter, page, or non-default configuration needed to reach the sink, and no public exploit has been identified at time of analysis. Impact is bounded to the victim's browser session on the affected site, with low confidentiality and integrity impact and no availability impact under the assessed vector.
Reflected cross-site scripting in the PluginUs.Net TableOn (posts-table-filterable) WordPress plugin affects versions through 1.0.7 and lets a remote, unauthenticated attacker craft a request or link that executes script in a victim's browser only after the victim interacts with it (CVSS UI:R). The available advisory does not identify the exact vulnerable parameter, page, or non-default configuration needed to reach the sink, and no public exploit has been identified at time of analysis. Impact is bounded to the victim's browser session on the affected site, with low confidentiality and integrity impact and no availability impact under the assessed vector.