Threats tagged 'ghsa-wj3j-63m4-hxjx'

The Data Tables Generator by Supsystic WordPress plugin contains a stored cross-site scripting (XSS) vulnerability in the updateRows action that allows authenticated users with subscriber-level access or higher to inject malicious scripts via table cell data. This vulnerability affects all versions up to and including 1.15.1. Exploitation requires that an administrator has explicitly granted the subscriber role access to the plugin's 'access_roles' setting, enabling them to reach the vulnerable action handler. The vulnerability can lead to script execution in the context of users visiting the injected pages.