https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 13:07:19 +0000 https://db.gcve.eu/vuln/fkie_cve-2012-20003 <p>Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the unsanitized &#39;key&#39; parameter in iframe.php. Attackers can craft GET requests to /wp-content/plugins/custom-tables/iframe.php with s=1 and a malicious key value to execute script in victims&#39; browsers and steal cookies. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-20.</p> <p>Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the unsanitized &#39;key&#39; parameter in iframe.php. Attackers can craft GET requests to /wp-content/plugins/custom-tables/iframe.php with s=1 and a malicious key value to execute script in victims&#39; browsers and steal cookies. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-20.</p> https://db.gcve.eu/vuln/fkie_cve-2012-20003 https://db.gcve.eu/vuln/ghsa-wvm8-6956-c3j5 <p>Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the unsanitized &#39;key&#39; parameter in iframe.php. Attackers can craft GET requests to /wp-content/plugins/custom-tables/iframe.php with s=1 and a malicious key value to execute script in victims&#39; browsers and steal cookies. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-20.</p> <p>Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the unsanitized &#39;key&#39; parameter in iframe.php. Attackers can craft GET requests to /wp-content/plugins/custom-tables/iframe.php with s=1 and a malicious key value to execute script in victims&#39; browsers and steal cookies. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-20.</p> https://db.gcve.eu/vuln/ghsa-wvm8-6956-c3j5