CVE-2020-12076

The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks CSRF nonce checks for AJAX actions

Critical · published April 23, 2020

CVSS v3.0
9.6
EPSS
1%
Percentile
52.1
In the wild
Unconfirmed
What it is

The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks CSRF nonce checks for AJAX actions. One consequence of this is stored XSS.

The record
Technical detail
CVSS v3.0
9.6 · CRITICAL
Vector
CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:R
CVSS v4.0
Not supplied
EPSS
0.00687 · 52.1th percentile
Published
2020-04-23T02:00Z
EPSS history
Timeline
  • 23 APR 02:00Z
    The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks CSRF nonce checks for AJAX actions
    cvelistv5