https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-22T23:15:40.045404+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2012-20003 CVE-2012-20003 — Custom Tables WordPress Plugin < 3.4.6 Reflected XSS via iframe.php 2026-10-22T23:15:40.046706+00:00

Affected: Web Updates KMU Custom Tables

Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the unsanitized 'key' parameter in iframe.php. Attackers can craft GET requests to /wp-content/plugins/custom-tables/iframe.php with s=1 and a malicious key value to execute script in victims' browsers and steal cookies. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-20.