Stored Cross-Site Scripting in WP DataTable Plugin for WordPress

CVE-2024-13566

What is CVE-2024-13566?

The WP DataTable plugin for WordPress is susceptible to Stored Cross-Site Scripting vulnerabilities, stemming from inadequate input sanitization and output escaping related to the 'id' parameter. Authenticated users, holding Contributor-level access or higher, can exploit this flaw by injecting malicious web scripts. When a page infected with these scripts is accessed by other users, their browsers execute the injected scripts, potentially compromising user data and the integrity of the website. It is imperative to mitigate this vulnerability promptly to protect against potential exploitation.

References