Stored Cross-Site Scripting in Visualizer: Tables and Charts Manager Plugin for WordPress
CVE-2025-1065

6.4MEDIUM

Key Information:

Vendor
Themeisle
Status
Visualizer: Tables And Charts Manager For WordPress
Vendor
CVE Published:
19 February 2025

Summary

The Visualizer: Tables and Charts Manager plugin for WordPress is susceptible to Stored Cross-Site Scripting due to inadequate input validation and output sanitization in its Import Data From File feature. This vulnerability allows authenticated users with contributor-level access or higher to inject malicious scripts. These scripts execute when other users access affected pages, potentially compromising the integrity and confidentiality of data within the application.

Affected Version(s)

Visualizer: Tables and Charts Manager for WordPress * <= 3.11.8

References

https://www.wordfence.com/threat-intel/vulnerabilities/id...
https://plugins.trac.wordpress.org/changeset/3240066/visu...

CVSS V3.1

Score:
6.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Craig Smith
.