Cross-Site Scripting Vulnerability in wpDataTables Lite by WordPress
CVE-2019-6011

6.1MEDIUM

Key Information:

Vendor

WordPress
Status
WPdatatables Lite
Vendor
CVE Published:
26 December 2019

What is CVE-2019-6011?

A cross-site scripting vulnerability exists in wpDataTables Lite, affecting version 2.0.11 and earlier, enabling remote attackers to inject arbitrary web scripts or HTML through unspecified vectors. This vulnerability can lead to unauthorized actions being executed on behalf of users, posing significant security risks.

Affected Version(s)

wpDataTables Lite Version 2.0.11 and earlier

References

https://wordpress.org/plugins/wpdatatables/
x_refsource_MISC
http://jvn.jp/en/jp/JVN14776551/index.html
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.