https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 20:22:54 +0000 https://db.gcve.eu/vuln/cve-2012-20003 <p><strong>Affected:</strong> Web Updates KMU Custom Tables</p> <p>Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the unsanitized &#39;key&#39; parameter in iframe.php. Attackers can craft GET requests to /wp-content/plugins/custom-tables/iframe.php with s=1 and a malicious key value to execute script in victims&#39; browsers and steal cookies. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-20.</p> <p><strong>Affected:</strong> Web Updates KMU Custom Tables</p> <p>Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the unsanitized &#39;key&#39; parameter in iframe.php. Attackers can craft GET requests to /wp-content/plugins/custom-tables/iframe.php with s=1 and a malicious key value to execute script in victims&#39; browsers and steal cookies. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-20.</p> https://db.gcve.eu/vuln/cve-2012-20003