CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1CVE-2021-46782 – Pricing Table by Supsystic < 1.9.5 - Reflected Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2021-46782
The Pricing Table by Supsystic WordPress plugin before 1.9.5 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting El plugin Pricing Table by Supsystic de WordPress versiones anteriores a 1.9.5, no escapa el parámetro tab antes de devolverlo en un atributo en el panel de administración, conllevando a un ataque de tipo Cross-Site Scripting Reflejado • https://wpscan.com/vulnerability/39e69487-aa53-4b78-a422-12515a6449bf • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2022-25604 – WordPress Price Table plugin <= 0.2.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
https://notcve.org/view.php?id=CVE-2022-25604
Authenticated (contributor of higher user role) Stored Cross-Site Scripting (XSS) vulnerability discovered in WordPress Price Table plugin (versions <= 0.2.2). Se ha detectado una vulnerabilidad de tipo Cross-Site Scripting (XSS) Almacenada y Autenticada (colaborador de rol de usuario superior) en el plugin Price Table de WordPress (versiones anteriores a 0.2.2 incluyéndola) • https://patchstack.com/database/vulnerability/pricetable/wordpress-price-table-plugin-0-2-2-stored-cross-site-scripting-xss-vulnerability https://wordpress.org/plugins/pricetable • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •