Threats tagged 'ghsa-rcm4-rpjc-6grg'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.4	CVE-2025-12823The CSV to SortTable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'csv' shortcode in all Medium6.42025-11-18GCVE DatabaseCVE-2025-12823 The CSV to SortTable WordPress plugin up to version 4.2 is vulnerable to stored cross-site scripting (XSS) via the 'csv' shortcode. Authenticated users with Contributor-level access or higher can inject malicious scripts through insufficient input sanitization and output escaping. These scripts execute when any user views the affected page, potentially compromising user data or session integrity. Report on CVE-2025-12823 Vulnerability CWE-79 #ghsa-rcm4-rpjc-6grg	GCVE Database	2025-11-18

Page 1 of 1